I called the merchant, who is a reputable mainstream merchant, and sent a ticket to their IT. I’m waiting for a response, but in the meantime, I’m wondering how this is possible. I have never signed into any account for this site on safari. I have signed onto my own account for this merchant in Firefox. I do not know who the person is whose account showed up in safari. I wasn’t logged in but when I went to the merchant’s homepage it said “Hi Ashley Moore” and then I saw there was a 5 in the cart icon, I clicked on it and it showed 5 items I have never heard of. It then asked me to log in and showed an email for this Ashley person. What could cause this? Could my safari have been hacked? No one but me has access to my phone. Using iOS 16.1.1, cellular data only, and no vpn submitted by /u/woniwonu [link] [comments]

Hey, I just set up LinuxLite as a VM in VirtualBox on my Windows pc, under network I picked NAT. I’m planning to use the VM to browse the internet using Chrome, without downloading or uploading anything. As far as I understand linux users are considerably safe against most types of malware because the malware can’t gain root access and is therefore unable to compromise the whole system, just local files or specific programs. But what about malware that spreads over the network, like worms for example? 1) Could such malware compromise the browser and then spread over my network to non-Linux machines? 2) considering I keep the system and software updated, how likely is that to happen? 3) If the answer to my first question is yes, how can I protect myself against such threats? submitted by /u/younggoodlooking [link] [comments]

I have been configuring a cellular router to be able to work better on the move. When connecting to it from another iPhone I got the "weak security" tip which stated that WPA/TKIP is deprecated. But how so? I thought TP Link has good products and it's a modern router. I checked and I can't configure it to use WPA3. Why not? Can't it just be done via a firmware update? submitted by /u/BigBootyBear [link] [comments]

I know that roles titles can be smoke and mirrors but I just got offered the DevSecOps Senior Advisor role with 3 years of experience and a TC of 133k CAD. The role is a mix of Cloud Sec (AWS and Azure), Data Loss Prevention, automation, in the Canadian financial sector. Since I'm still at the beginning of my career , I tend to think long-term and I'm willing to eventually try new things related to the tech sector, around cybersecurity. What would be the next logical step after this role in a few years, Architecture ? Software Engineering (I don't really code, except I learned C# a few years ago), consulting? Management ? submitted by /u/down_to_earth2 [link] [comments]

anyone know how to decipher this site? it mentions JPmorgan chase https://www.sec.gov/Archives/edgar/data/19617/000119312516528232/0001193125-16-528232.txt submitted by /u/Randomthings55 [link] [comments]

I have a setup where guest WiFi users get IP address and DNS servers from the same resources that service staff computers. These are off AD servers. While the ACLs limit access we have no control over the endpoints and have seen heavily loaded malware laptops join. So I want these servers be not AD, be on an island themselves, and be hardened. If they’re breached they impacted on guest WiFi. Think through other parts this - I need a way into from staff side, so a bastion? Or VPN? Anything else I should consider? I do need internal DNS as some resources are internal but those are web sites in a DMZ. Appreciate any advice ideas thoughts! submitted by /u/Shujolnyc [link] [comments]

I saw this advice sometime earlier, and while it improves memorability, doesn't this make you susceptible to attacks because you are more likely to choose a much smaller subset of diceware's dictionary? It has 7776 words, and I personally as a non-native English speaker would likely choose only 500 of them willingly. If someone was able to figure them out (the 500 words) through some kind of analysis am I not screwed in this case? submitted by /u/SteveSonOfJobs [link] [comments]

How do you go about defining what a user can access? So right now say you have the sub standard VPN where the user can reach the front door of 99% of applications within the enterprise. How do you go about creating the user profile to know what they need to access and eliminate the rest? Thanks submitted by /u/brasschaser [link] [comments]

I work in application security and have been joining in on some discussions to assess our products' security in depth. Some of these conversations involve topics that I have not really had to contend with so far. For example, storage location of the database connection string, management of db encryption key, code deployment method, etc -- things that have more to do with I guess the back end architecture? As an appsec engineer, I've mostly been dealing directly with web app security (OWASP top ten, SAST and DAST scanning, API testing, etc), and the learning materials I've used for appsec and for my certs never really seemed to discuss backend architecture related to the examples above. Is there a specific discipline for this within cybersec? I'm mostly interested in finding resources to study that aspect of security and build my skills. TIA! Edit: maybe 'backend architecture' is not the right terminology. Unfortunately I don't have a background in CS or development so I'm always getting tripped up with terminologies. submitted by /u/desmond_4815162342 [link] [comments]

Can someone explain to me why running a .ps1 script by double clicking on it is considered insecure? I set the execution policy to remote signed, so nothing can execute from external origin that is not signed. I'm open to using a more secure method, but I am unaware of what that solution is. Link to my original post below in regards to editing a small script I wrote. https://www.reddit.com/r/PowerShell/comments/10ssoxa/stop_powershell_script_from_closing_powershell/?utm_source=share&utm_medium=android_app&utm_name=androidcss&utm_term=1&utm_content=share_button submitted by /u/defaultaro [link] [comments]

Did you know, onlyFans has over 170 million users subscribed? That’s 50% more people than the whole population of the USA! or, over 2.5… Continue reading on Medium »

Ive curated a list of open source intelligence tools which are used by intelligence enthusiasts, coders and hackers and also added… Continue reading on Medium »

Let’s start to investigate this stealer security incident. Firstly, we can see the sender, recipient address, incident happening time and… Continue reading on Medium »

This is the second update for the Malaysian OSINT resource list. Basically, I just follow the OSINT Skills Chart for the base Continue reading on Medium »

submitted by /u/Mini_True [link] [comments]

Penetration testing, also known as pen testing, is an important aspect of cybersecurity that helps organizations identify and address… Continue reading on Medium »

Hey there reader, are you hoping to make millions with bug bounty? That’s quite the ambition you’ve got there, and while I’m not going to… Continue reading on Medium »

BugBase Apollo is a community of highly skilled security experts and hackers passionate about making the digital world safer. These elite… Continue reading on Medium »

Hello my infosec and tech mates, I hope you all are doing great at your lives even am doing great right now, (can’t say not really). So… Continue reading on Medium »

Portswigger Cross-Site Request Forgery Lab Simple Solution | Karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

Meu nome é Diego, e vamos ao que interessa. Continue reading on Medium »

开源软件供应链攻击回顾 by ourren 美国NSA安全运营关键原则 by ourren 25美元破解Starlink 星链终端路由器 by ourren C2服务器隐藏与Linux上线 by 路人甲 分享Jar包分析工具：jar-analyzer by ourren 更多最新文章，请访问SecWiki

Article URL: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21974 Comments URL: https://news.ycombinator.com/item?id=34651642 Points: 3 # Comments: 1

Parte 1 Continue reading on Medium »

submitted by /u/Gallus [link] [comments]

submitted by /u/crypt_keepr [link] [comments]

submitted by /u/f3d_0x0 [link] [comments]

submitted by /u/hacksysteam [link] [comments]

submitted by /u/Mempodipper [link] [comments]

submitted by /u/Gallus [link] [comments]

Article URL: https://nakedsecurity.sophos.com/2023/02/01/password-stealing-vulnerability-reported-in-keypass-bug-or-feature/ Comments URL: https://news.ycombinator.com/item?id=34648654 Points: 1 # Comments: 1

I changed the timezone on the device to what it was, but my report is still showing my timezone when items/images are listed for created/written/accessed. Is that normal behavior? Like in the evidence it shows the proper TimeZone/Time but once an item is bookmarked and in the report it shows my timezone in the report. Is there a way to change this? Sorry for asking here again, I really don't know where to turn to. I've taken training and I have the books, but little things like this and the HEX thing weren't explicitly mentioned. submitted by /u/dardack [link] [comments]

Users are experiencing significantly slow FTK Imager verification times when verifying their images from our file servers (WS2019 Standard VMs) for their processed images. Processing to our file servers may go at 60 MB/s yet verifying those same images may go at 7 MB/s. This is happening for all users regardless of what data they are trying to verify. We host the virtual file servers on Dell R730s running Hyper-V. I have tried setting exclusions in Windows Defender for the network locations, it does speed up some image verification as it no longer scans the files, but it always seems to sink back down to 7-15 MB/s for most images. When the data is verified locally and not on the network, verification speeds seem to match the processing speeds of 60 MB/s. The file servers themselves have 10Gb vNICs and handle data copying easily and doesn't slow down when transferring data to our users, data is still transferred around 80-90 MB/s to th user's 1Gb computers. Any insight is appreciated, these slow verification times are hindering workflow! Our environment: -Clients have Dell T7920s, T5820s, T7910s -Servers are Dell R730s with SAS connections to storage enclosures running HDDs and using Microsoft Storage Spaces Direct. -Connections are 10Gb to switches and 1Gb to user computers. submitted by /u/defaultuser100 [link] [comments]

submitted by /u/dmchell [link] [comments]

Passive reconnaissance is the process of collecting information in a covert manner about an intended target without the target knowing… Continue reading on Medium »

Unlocking the Secrets to a Successful Cybersecurity Career: A Step-by-Step Guide for Beginners Continue reading on InfoSec Write-ups »

What happened with Bug Zero? Continue reading on Bug Zero »

Local File Inclusion (LFI) is a type of vulnerability commonly found in web applications. It allows an attacker to include a local file… Continue reading on Medium »

Sec 542 & 642 notes in here: https://lnkd.in/dkeGVvy Continue reading on Medium »

This story of how I find vulnerabilities in google, Twitter, apple, and dell for fun after more than 40 tries Continue reading on Medium »

Hey folks, I am Bharat Singh a Security researcher and Bug Hunter. I am here with an amazing writeup about Password Reset Poisoning with… Continue reading on InfoSec Write-ups »

Continue reading on Medium »

Enum and information: Continue reading on Medium »

We Can Looks Most Commonly Shown Status Code Along With Their Saying. Continue reading on Medium »

El IMINT o Inteligencia de Imágenes, es una disciplina dentro de la Inteligencia que consiste en el análisis y/o explotación de imágenes… Continue reading on Medium »

There's been a merger, and I'm trying to address a blind spot with all the new systems and widgets. I'd like to find any/all API services available and confirm they are secured. While I could just dump dns entries and loop through them with /api/ at the end of a curl... i don't feel like that's particularly exhaustive. I have Nessus running, but I haven't found where they have a plugin that really handles this. I did some poking around the open-source world and the search terms are generic enough that i'm not getting great results. submitted by /u/lonejeeper [link] [comments]

I see people hiding certificate IDs when posting on social media platforms. Is there any solid reason or restrictions or people just following trend blindly. submitted by /u/dauhui [link] [comments]

Internet Bug Bounty disclosed a bug submitted by kurohiro: https://hackerone.com/reports/1813831 - Bounty: $2400

Sorare disclosed a bug submitted by gokulsk: https://hackerone.com/reports/1817214 - Bounty: $300

TikTok disclosed a bug submitted by amans: https://hackerone.com/reports/1247108 - Bounty: $1564

据多家媒体消息，阿里云盘在2月3日22点30分左右出现故障无法访问。

《任务》中指出，推进电力行业网络与信息安全工作。

各位 Buffer 周末好，又到了周报时间，我们总结推荐了本周的热点资讯、安全事件、一周好文和省心工具，保证大家不错过本周的每一个重点！

reGeorg该工具是基于socks5而且支持的脚本很多，例如aspx|ashx|jsp|jspx|php等等。

QTS 5.0.1 和 QuTS hero h5.0.1 两款软件中存在严重漏洞。

建筑和家居装修巨头 Andersen Corporation 暴露了客户的私人数据，包括家庭照片和地址。

自 2021 年 9 月以来，全球至少有 1200 台 Redis 数据库服务器被一个名为 HeadCrab 恶意软件威胁。

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

In many instances, the answer is becoming “when” not “if.” Continue reading on System Weakness »

OSS-Fuzz announced to add JavaScript support in 2023: https://security.googleblog.com/2023/02/taking-next-step-oss-fuzz-in-2023.html Continue reading on Medium »

In many instances, the answer is becoming “when” not “if.” Continue reading on System Weakness »

OSS-Fuzz announced to add JavaScript support in 2023: https://security.googleblog.com/2023/02/taking-next-step-oss-fuzz-in-2023.html Continue reading on Medium »

One of the most discussed concepts in the Information Security world in recent history has been Zero Trust. Although many vendors claim to have products for implementing Zero Trust, an organization must not view them as an instant solution to achieving Zero Trust. Zero Trust should be viewed as a philosophy comprised of many controls... The post The First Steps on the Zero Trust Journey appeared first on TrustedSec.

Article URL: https://ioc.exchange/@FuzzingWeekly/109800061913485158 Comments URL: https://news.ycombinator.com/item?id=34639120 Points: 1 # Comments: 0

submitted by /u/NullVoidPointer [link] [comments]

Portswigger’s Cross-Origin Resource Sharing Lab Simple Solution | Karthikeyan Nagaraj Continue reading on Medium »

Portswigger’s SQL Injection Lab Solution | Karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

The rise of cyberattacks has been a significant concern for every organization. In the Data-driven business, organizations in various… Continue reading on Medium »

Summary Continue reading on Medium »

This blog is about how I got my first HOF after chaining multiple bugs. Continue reading on InfoSec Write-ups »

Cybersecurity is the safeguarding against cyber threats of internet-connected systems, including data, software, and hardware. To prevent… Continue reading on Bug Zero »

We software developers are always searching for methods to improve our processes and function more productively. Continue reading on Bug Zero »

This write-up is specially made for showing the power of my new tool, It’s called Xssor.go This tool is a XSS payload reflection tester… Continue reading on Medium »

Article URL: https://hothardware.com/news/keepass-devs-downplay-password-theft-vulnerability Comments URL: https://news.ycombinator.com/item?id=34635107 Points: 1 # Comments: 1

https://213.230.96.51:8090/files/ebooks/ submitted by /u/revwolf [link] [comments]

https://itonaku.xyz/ submitted by /u/Isolatedleliel [link] [comments]

Lots and lots and lots of Cyber, Accounting, etc... https://www.kgay4all.com/seioqueseiporleroqueleio/Books/ ​ Graphics program manuals and guides of all kinds. https://lira.epac.to/DOCS-TECH/Graphics/Photoshop/ ​ Polymers. It's all polymers. https://www.eng.uc.edu/~beaucag/Classes/Properties/Books/ submitted by /u/Shitemoji69 [link] [comments]

Anyone deploy Wazuh where you needed separate indexer, server, and dashboard servers? I’ve asked in that sub and got no response. Don’t need scale specifics, just high level here are the pieces. It looks to me like I’d need (as an example): 3 indexers 1 server 1 dashboard Load balancer for indexers submitted by /u/Shujolnyc [link] [comments]

Users who use Trellix (exMcAfee) Endpoint Protection (ENS), do you have any success story with fixing consuming high CPU? I read the entire McAfee forum, all the guides and troubleshooting, server profiling, whitelists and even just turned off the antivirus on the server, but the CPU is still high +20-50% by McAfee in turn off mode :( I've reinstalled it 10 times already. How did you solve the problems? Also, a question for other users who use other antiviruses, how do you deal with high CPU? Do you often have these problems? submitted by /u/athanielx [link] [comments]

I am looking for tools to do "static" log analysis. (Not sure if this is the correct term for it) So I am talking about an air-gapped system where it is not possible to collect the data (log files) over the network. Every couple of months the log files will be collected via USB sticks and combined in one place. Right now the data is fed into ELK and then parsed and analyzed but I was wondering if there are maybe tools which are made to do these kind of analysis. Because from my understanding ELK is not meant to be used like this. Do you have any recommendations? submitted by /u/Ludtwigk [link] [comments]

Long Story short, was a court reporter and hands gave out. I'm a little discouraged because I'm in my 30s and am wanting to start a new chapter in my life, and I know NOTHING about computers. I'm not even sure how to work Reddit. This is my 2nd post. I'm not even sure I'm in the right spot lol...Anyway, I looked into CS50 (the first lesson) and I loved it. I've always loved math, I've always loved the detail. I don't know, I want to give it a shot. A real shot. What do I need to know to grow in knowledge and really set myself up for success here? School isn't an option anymore. I'm 60k in the hole and paying that baby off. Any Computer Science people out there? Or Cyber Security that would give an advice or two? submitted by /u/No_Conversation5705 [link] [comments]

After the 2022 LastPass breach, many organizations began searching for alternative password vault solutions. KeePass, a legacy open-source option has risen to the top for many organizations evaluating their options. Others have been using this option already for years. A recent POC demonstrating who to abuse the Trigger feature was released and assigned a CVE.... The post What this KeePass CVE means for organizations searching for new password vaults appeared first on TrustedSec.

Shopify disclosed a bug submitted by kannthu: https://hackerone.com/reports/1444682 - Bounty: $9400

submitted by /u/jat0369 [link] [comments]

submitted by /u/adityatelange [link] [comments]

submitted by /u/sullivanmatt [link] [comments]

submitted by /u/_m-1-k-3_ [link] [comments]

submitted by /u/j_bono [link] [comments]

submitted by /u/hacksysteam [link] [comments]

submitted by /u/hardenedvault [link] [comments]

submitted by /u/cfambionics [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Hello all, i am wondering if there is any software to analise gmail acounts, like logins, Accesses, points of logins, in freeware/opensource? Thank you submitted by /u/hpbalmeida [link] [comments]

Anyone ever used it before if so how was it. Also it works on only works on Mac is con or pro for consumer and forensic experts ? submitted by /u/Jack_gg123 [link] [comments]

Hi All, Curious about what everyone has been using or would consider to use for a portable forensic workstation. I am well aware the meta are gaming laptops. Our practice is a small team and we're undergoing an equipment refresh. We have Alienwares and Dells currently, but I would like to get an idea of what everyone else seems to be using, my team leader is open to suggestions. We're a Cellebrite and Axiom shop; my understanding in basic terms is Cellebrite is bound by RAM and Axiom bound by CPU for parsing images. Any noticeable difference with modern (meaning 1-2 year old) Intel vs AMD CPUs? Also open to suggestions for smaller laptops that may hit a sweet spot in terms of performance comparable to a gaming machine- our practice sometimes delivers devices to clients for remote collections. submitted by /u/greengobblin911 [link] [comments]

submitted by /u/Alarming_Arm_7724 [link] [comments]

In this week's red team tip. I show a way to enumerate AD in an OPSEC-safe way with Layer8Security's SilentHound. This tool uses a single LDAP query to list AD and caches the results locally. It's not nearly as loud or as well fingerprinted as SharpHound/AzureHound. Plus, you can convert the local cache to JSON and use jq or other tools to query the cached data. https://youtu.be/MRLZO17ZrmA submitted by /u/Infosecsamurai [link] [comments]

It may seem counterintuitive to pay someone to tell you your shortcomings, but smart companies today are shelling out dollars and… Continue reading on Medium »

应对监管部门审计，如何提供安全事件应急响应管理制度的落实情况；WebShell的检测思路及控制措施的探讨，更多内容欢迎点击~

2022 年，黑客在加密货币领域窃取了创纪录的38亿美元资金。

依照《保密协议》处以100万元的经济赔偿，责成其对下游供应商加强信息安全管理，并对泄密人进行处理。

针对移动银行的凭据收集网络注入与加密货币应用程序一起在暗网上出售。

新型加密器被称为LockBit Green，通过对样本进行逆向工程，发现它100% 基于 Conti泄露的源代码。

作者：雪诺凛冬实验室 gd 原文链接：https://mp.weixin.qq.com/s/R1BoWivtTxo0zFk4nyBFTw 前言 随着近几年HW实战的开展所有人都对Cobalstrike不再陌生，相关安防设备一直在思考如何在流量侧/终端侧识别出CS的行踪。攻击者除了使用习惯上基于插件进行开发提效外，还有一些需要关注对抗的点来提升CS的隐藏性，我们会分两篇文章将CS在流量层面、内...

作者：雪诺凛冬实验室 gd 原文链接：https://mp.weixin.qq.com/s/R1BoWivtTxo0zFk4nyBFTw 前言 随着近几年HW实战的开展所有人都对Cobalstrike不再陌生，相关安防设备一直在思考如何在流量侧/终端侧识别出CS的行踪。攻击者除了使用习惯上基于插件进行开发提效外，还有一些需要关注对抗的点来提升CS的隐藏性，我们会分两篇文章将CS在流量层面、内...

In the west, the practice of open-source intelligence is the norm. While particular weapon systems are seen as almost magical for the war… Continue reading on Medium »

POV you login into a site on a work computer using your credentials however after putting yours in you login into whoever was last using the computer. What are your thoughts/theories on how this could happen? submitted by /u/EstrogenGirl [link] [comments]

I've been reflecting on the growing number of data breaches, sim swap attacks, and other factors that have resulted in identity theft. I wanted to run a thought by this subreddit to get opinions on something I'm thinking of doing to provide some of my accounts with a higher level of protection. ​ I have a Google account that has their Advanced Protection Program enabled - two physical security keys as MFA. That account also has an active Google Voice number that I've sat on and done practically nothing with for several years. That GV phone number receives 1 or 2 calls/texts a year and they're always from people who knew the owner of that number some years ago. So, the number is more or less unknown and not out there in any data breaches AFAIK. ​ My idea is to use this Google Voice number for several accounts that don't offer the ability to use a physical security key for MFA. As I understand it, because your GV number is tied to your Google account and therefore can't be accessed by anyone without your credentials and MFA (which in this case would require physical access to as well as knowledge of where both of my physical keys are), and it can't be sim swapped because there's no sim to swap, this seems like the best, most secure bet for maintaining account security for online accounts that have only SMS 2FA as an option. ​ Any holes that you can poke in the idea? Are there better methods when physical key security isn't available? submitted by /u/Aggravating_Bell3162 [link] [comments]

I'm a sophomore computer science major that has an upcoming interview with Meta for a Privacy Engineering role. One of the rounds for the interview is an incident response scenario interview. Here are the instructions: "During this interview we will ask you to run an investigation of a suspicious alert. You will need to determine whether this is an incident or not and demonstrate your understanding of the root cause, mitigation and remediation". What resources could I look into to best prepare for the interview? Would a Security+ textbook be enough to get a good grasp of Incident Response? I'm relatively new to cybersecurity, and any beginner friendly resources would be greatly appreciated. Thanks. submitted by /u/NoFaithlessness6885 [link] [comments]

Howdy! Longtime lurker, first time poster. I'm a threat hunter, and I just got assigned a new client that utilizes Exabeam. Do any of y'all have experience with the query language used by Exabeam? I'm somewhat coming up blank even from Exabeam's own documentation. Most of their training videos seem centered around working through AA (Advanced Analytics), but I'm trying to produce actual queries in DL (Data Lake) and not pick through a bunch of screens in AA. Thanks! submitted by /u/cosmic_gr4zer [link] [comments]

What are some tips and suggestions for a blue team trying to defend against red team attackers in a competition . Realistically we want to keep the uptime as long as possible but honestly I’d like to know what others suggest to help submitted by /u/RevPurge [link] [comments]

This is a common method of creating your own, free, multiplatform Password Manager. ​ Simply store the DB on a cloud storage provider and use a manager plus a fork on your phone, since the manager doesn't work on it's own. For example: ​ This - https://play.google.com/store/apps/details?id=com.jefftharris.passwdsafe With this - https://play.google.com/store/apps/details?id=com.jefftharris.passwdsafe.sync ​ My question is, is this system considered wise in terms of security? Are these DBs encrypted? submitted by /u/trekinstein [link] [comments]

Obligatory SIHTF moment here. Have already started the process of what I think is prudent.. what would you guys do first? The part that tipped this off was a folder called "ptest" showing up on one users desktop computer. No other machines in the environment appear to have this folder. The other reason this machine is under the microscope (and currently turned off, although ptest was created nov 3rd) is because a user walked in to find another users name on the login screen, it does not appear that the login actually occurred. At the moment it appears the person was trying to get in and either did not have the exact correct password or was interrupted. The specific user that they are trying to target is not very computer literate and had an easy password something comparable to 'reddog12' - this has been changed on a different computer. Most concerned about access to 2 different servers. Thank you for any suggestions. submitted by /u/Blazah [link] [comments]

Hello, I have been trying to get a password manager, but after reading lots of stuff, I'm more confused than before... My use case is simple: store and manage password for websites if a website allows me to use yubikey 5C NFC, I will add that as MFA. usage on windows, macos, Linux and Android Should I add to the masterpassword the Yubikey? Which one do you use? What would you recommend? submitted by /u/IP_FiNaR [link] [comments]

Any ideas on where I can find industry numbers for security metrics? for example, training awareness completion, phishing simulation, etc. i’m trying to baseline our goals submitted by /u/evilmanbot [link] [comments]

I've been tinkering around and trying to solidify my recon phase of things. I'm pretty new and have been liking the results from amass, SubDomainzer, and subscraper. I'm sure there are more tools out there but this will generally give me hundreds sometimes a thousand or so subdomains to work with. I plan on making a custom script that will read the files produced by all the different tools to make a master file of subdomains that do not repeat the same one (tools are going to spitting out repeats of other tools). Once I have a huge subdomain file list, what's the most efficient way to work the subdomains moving into port reconnaissance? Ive used some online tools that allow you to paste subdomains and it'll give you the IP. But I also know that in Kali Linux you can use nslookup to get ips. I'm thinking about writing a custom script that will nslookup command down the master list of subdomains and print it out into a master ip list document neatly one row at a time. I'm assuming the efficiency goal is to do the following: Subdomains> ips > port scans > vulnerability assessment phase Does anyone have any tips of the trade or the best tool or method once you have that huge file of unique subdomains? submitted by /u/Speen117 [link] [comments]

submitted by /u/postmodern [link] [comments]

submitted by /u/gfdgfbal [link] [comments]

submitted by /u/DevSec23 [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/Mempodipper [link] [comments]

Cross-Site Scripting (XSS) é uma das vulnerabilidades de segurança mais comuns na web. É uma técnica que permite a injeção de scripts… Continue reading on Medium »

A Comprehensive Guide to Identifying, Mitigating and Protecting Your Website from Cross-Site Request Forgery Continue reading on InfoSec Write-ups »

In the Android, application it is a package called apk(android package kit), it is similar to a zip-like format to extract the data from… Continue reading on Medium »

Before taking any action on any bug bounty program it is necessary to carefully read the rules of the program. Continue reading on Medium »

# Exploit Title: PARK TICKETING MANAGEMENT SYSTEM — Stored XSS Vulnreability. # Date: 25–01–2023 # Exploit Author: Venkata Siva Kumar… Continue reading on Medium »

Hey guys, in this tutorial, I will be sharing my learning about account takeover which I have learned after reading some blogs only on… Continue reading on InfoSec Write-ups »

What is Ethereum Everything you need to know? Continue reading on Medium »

There’s always a way to exploit xss in different contexts Continue reading on InfoSec Write-ups »

Assalamualaikum, Bug Hunter! Bagaimana Kabarnya ? Semoga Baik-baik saja ya, kali ini saya mau membuat Write Up yang menurut saya Bug ini… Continue reading on Medium »

What is OSINT? Continue reading on Medium »

RSS (Really Simple Syndication) is a technology that allows users to subscribe to frequently updated content on the internet, such as blog… Continue reading on Medium »

I joined late, on 5th or 6th January when all of the tweets had already been posted. Players were asked to identify country, city, street… Continue reading on Medium »

I am here to help you uncover hidden information using advanced Open-Source Intelligence (OSINT) techniques. Continue reading on Medium »

January 1, 2023 Continue reading on The Sleuth Sheet »

Smart speakers have learned to listen to suspicious noise in the house, however, not all users were happy with the new option, writes… Continue reading on Medium »

File Transfer Protocol (FTP) and its security implications. This post offers an in-depth look at the usage of FTP for file transfers Continue reading on InfoSec Write-ups »

In the last part, we talk about how to track the hacker’s activities on our network using a canary token. Continue reading on System Weakness »

In the last part, we talk about how to track the hacker’s activities on our network using a canary token. Continue reading on Medium »

— — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — — Continue reading on Medium »

submitted by /u/degamezolder [link] [comments]

Article URL: https://jpayne.sackheads.blog/2023/01/31/another-password-manager.html Comments URL: https://news.ycombinator.com/item?id=34614678 Points: 1 # Comments: 0

九阶段太空攻击研究与战术分析框架和七层美国防太空架构 by ourren 2022年度APT高级威胁报告 by ourren 更多最新文章，请访问SecWiki

九阶段太空攻击研究与战术分析框架和七层美国防太空架构 by ourren 2022年度APT高级威胁报告 by ourren 更多最新文章，请访问SecWiki

这些年，和各种类型的网安客户打过交道，有些事想起来还挺有意思。

CryptBot 是一种针对 Windows 操作系统进行信息窃取的恶意软件，在 2019 年被首次发现，旨在窃取失陷主机的敏感信息。

我们全新整理了2022年网际思安麦赛安全实验室（MailSec Lab）在邮件安全威胁领域的数据分析成果，及观察到的全球前沿信息和数据。

SBOM作为软件供应链安全治理的重要抓手，其在行业的应用实践速度明显加快。

Azov 勒索软件家族最早出现在2022年10月中旬，是一款感染型勒索病毒。

TikTok首席执行官周受资已同意参加在美国国会举行的听证会，时间定于3月23日。

CAN网络不是一个封闭的内部网络，可直接通过车内的OBD诊断接口接入CAN总线，也可通过智能手机、云服务器等与T-Box建立连接间接接入CAN总线，这样就给不法者入侵CAN网络提供了可乘之机。

通过 CVE-2021-35394 的在野攻击情况可以看出，攻击者对供应链漏洞非常感兴趣，物联网中的供应链安全更应该引起注意。

FreeBuf咨询正式发布 《CCSIP（China Cyber Security Industry Panorama）2022 中国网络安全行业全景册（第五版）》。

对格式化字符串漏洞利用过程进行分析。

KeePass 官方发布声明表示，CVE-2023-24055 漏洞不应该归咎于 KeePass，并且这一漏洞不是其所能够解决的。

机器学习作为车载网络入侵检测中至关重要的一项技术，可实现对已知/未知攻击行为的特征识别检测。

Google Fi 表示，客户数据已被黑客泄露，这起事件很可能与 1 月 19 日发生的大规模 T-Mobile 黑客攻击有关。

微软安全团队追踪到100 多个在攻击期间部署勒索软件的攻击者，总共监控到50多个被频繁使用的勒索软件系列。

实现DVWA平台的搭建；进行SQL注入的练习，了解因web应用程序对用户输入数据的合法性没有判断或过滤不严而造成的危害。

NTLM协议具有NTLM v1、NTLM v2两个版本，但是目前使用最多的是NTLM v2。

See how Research Team Lead Carlos Perez dissects a sample of a OneNote document that was used to deploy ASyncRAT, an open-source remote admin tool, to enable phishing attacks. You’ll find out how these OneNote files are now being used by threat actors and where to find the location that ASyncRAT is being downloaded and... The post How Threat Actors Use OneNote to Deploy ASyncRAT appeared first on TrustedSec.

I booked marked a hex value but the text is showing in the Report. The text isn't the helpful part, is there a way to show Hex value instead? Also, I vaguely recall years ago being able to show the "Report" section in the report. You know the report tab when viewing a file, i remember being able to select that as an option to show. I can't seem to find it anymore. Is that no longer possible? submitted by /u/dardack [link] [comments]

No content preview

No content preview

No content preview

A Comprehensive Guide to Understanding and Defending Against Phishing Scams Continue reading on InfoSec Write-ups »

No content preview

I will be going over things you can add to your company's code base to increase the security of your app. Continue reading on InfoSec Write-ups »

No content preview

No content preview

Maximizing Earnings While Protecting Your Online Safety: A Guide to Online Income Generation and Cybersecurity Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

A Comprehensive Guide to Understanding and Defending Against Phishing Scams Continue reading on InfoSec Write-ups »

No content preview

I will be going over things you can add to your company's code base to increase the security of your app. Continue reading on InfoSec Write-ups »

No content preview

No content preview

Maximizing Earnings While Protecting Your Online Safety: A Guide to Online Income Generation and Cybersecurity Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

A Comprehensive Guide to Understanding and Defending Against Phishing Scams Continue reading on InfoSec Write-ups »

No content preview

I will be going over things you can add to your company's code base to increase the security of your app. Continue reading on InfoSec Write-ups »

No content preview

No content preview

Maximizing Earnings While Protecting Your Online Safety: A Guide to Online Income Generation and Cybersecurity Continue reading on InfoSec Write-ups »

No content preview

Researchers S2W used Jackalope fuzzer to exploit CVE-2022–24548 in Windows Defender and bypass its security controls. Continue reading on Medium »

Researchers S2W used Jackalope fuzzer to exploit CVE-2022–24548 in Windows Defender and bypass its security controls. Continue reading on Medium »

作者：zoemurmure 原文链接：https://www.zoemurmure.top/posts/cve_2023_21752_1/ 0. 前言 CVE-2023-21752 是 2023 年开年微软第一个有 exploit 的漏洞，原本以为有利用代码会很好分析，但是结果花费了很长时间，难点主要了两个：漏洞点定位和漏洞利用代码分析，因此在本文中花费了更多的篇幅介绍了这两部分内容，欢迎指...

作者：zoemurmure 原文链接：https://www.zoemurmure.top/posts/cve_2023_21752_1/ 0. 前言 CVE-2023-21752 是 2023 年开年微软第一个有 exploit 的漏洞，原本以为有利用代码会很好分析，但是结果花费了很长时间，难点主要了两个：漏洞点定位和漏洞利用代码分析，因此在本文中花费了更多的篇幅介绍了这两部分内容，欢迎指...

submitted by /u/dmchell [link] [comments]

Hey all, I have an upcoming physical/phishing engagement. Unfortunately I was tasked very short notice to develop a phishing campaign with custom domains. My boss is VERY adamant that this remains hush-hush so no whitelisting. (We are a PE firm testing some portfolios companies.) So far I have the domains bought, SPF, DKIM, and DMARC have been configured. I’ve tested my email configuration against mail tester and it’s 10/10. I have tried various combinations of O365 and SMTP APIs but everything I have tried ends up hitting the spam filter. Do you all have any recommendations on how to build IP/Domain reputation fast? Have any of you had success with an inbox warmer? I realize that this might not be possible on such short notice (<2 weeks away). I appreciate any tips/feedback. submitted by /u/KungFuBatman [link] [comments]

Judge.me disclosed a bug submitted by penguinshelp: https://hackerone.com/reports/1397940 - Bounty: $500

Judge.me disclosed a bug submitted by criptex: https://hackerone.com/reports/1252155

Judge.me disclosed a bug submitted by penguinshelp: https://hackerone.com/reports/1609955 - Bounty: $500

Judge.me disclosed a bug submitted by vj1naruto: https://hackerone.com/reports/1398285 - Bounty: $250

Some errors are occasional, others result from poor design, in this case, finding a vulnerability allows you to find many others… Continue reading on InfoSec Write-ups »

A flaw in a new, centralized system that Meta developed for users to manage their Facebook and Instagram logins could have made it… Continue reading on Medium »

Web Cache Poisoning — An Introduction | Karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

بسم الله الرحمن الرحيم Continue reading on Medium »

Sometimes, an attacker sends payloads to hack a system but nothing is returned by the application, which can confirm that the application… Continue reading on Medium »

Halo teman teman perkenalkan nama saya Mohammad Alfin Hidayatullah, Saya ingin membagikan write up tentang bug yang saya temukan di… Continue reading on Medium »

How to tackle some obstacles when hacking headless browsers to maximize the value of arbitrary file read vulnerabilities. Continue reading on Medium »

Cyber security is becoming increasingly important as the number of cyber attacks continues to rise. To stay ahead of the threat… Continue reading on Medium »

This is practice lab presented by portswigger web security team. So this is under flow control vulnerability present in web application. Continue reading on Medium »

Introduction Continue reading on Medium »

I discuss an interesting attack vector which not many people do to possibly bypass 2 factor authentication in a web application. submitted by /u/TheCrazyAcademic [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/qwerty0x41 [link] [comments]

submitted by /u/eberkut [link] [comments]

submitted by /u/scopedsecurity [link] [comments]

submitted by /u/roy_6472 [link] [comments]

submitted by /u/n0llbyte [link] [comments]

Discussing a under rated sub bug class of Buisness Logic Flaws in web apps that deserves more attention. submitted by /u/TheCrazyAcademic [link] [comments]

submitted by /u/ustayready [link] [comments]

submitted by /u/Thocomerius [link] [comments]

http://amigamuseum.emu-france.info/Fichiers/mp3/ http://worldofmenchi.fr/Amiga/Musics/ https://www.amigahellas.gr/downloads/music/ submitted by /u/Waste-Release-6235 [link] [comments]

La fase de explotación en un Red Team es la fase en la que se aprovechan las vulnerabilidades identificadas en la fase de reconocimiento… Continue reading on Medium »

As businesses become increasingly reliant on technology, the need for robust security measures has become more important than ever. With… Continue reading on Medium »

Cyber security is becoming increasingly important as the number of cyber attacks continues to rise. To stay ahead of the threat… Continue reading on Medium »

Introduction Continue reading on Medium »

Shopify disclosed a bug submitted by irisrumtub: https://hackerone.com/reports/1276742 - Bounty: $5300

I'm currently in the role of an Application Security Engineer in a Brazilian company, and my knowledge is becoming stagnant due to a lack of challenging tasks (which I hate). Do you guys have any certification recommendations that could be a challenge and also help boost my career/job profile? I've got a background in pen-testing and offensive security in general but have lost some interest in it as I don't really like the job opportunities associated. I've read a lot on OSCP and other Offensive Security certifications, but they all seem very offensive, whereas I'd like to focus more on the defensive side. (Vulnerability Management, how to implement SAST/DAST, when should a bug-bounty program be introduced? how would you rank the company's security maturity? Something along those lines) submitted by /u/Krlier [link] [comments]

What communities are you a part of? Subreddits, associations, or other organizations to collaborate. submitted by /u/PussyFriedNachos [link] [comments]

Hi all, Hoping to get some advice. I would like to switch positions and work in a malware analyst or reverse-engineering role and was wondering if getting the GREM certification would be helpful in landing a job. I previously worked as a security consultant, red team member, tech writer, and, most currently, as product owner for an identity provider startup. I've come to dread working as a manager and get stressed and depressed every time I see myself being added to another meeting so I think some kind of change is necessary. Most of my technical work experience has been security-focused, though not on malware. More using tools such as burp suite, cobalt strike, nessus, IBM app scan, and other VA/pentesting tools. And writing reports. Lots of reports. I have some personal RE experience - I used to be active on some forums and progressed to recovering the RC4 keys of zeus variants and things like that, though my skills might be a bit rusty. I know enough x86/ia64 assembly to not be totally lost when using binary ninja, ghidra, or ida. I don't know if malware analyst/RE positions have hiring challenges similar to other netsec positions and I am not 100% sure what to expect. This leads me to ask - is getting the GREM cert worthwhile for landing a job? I would be paying for it out of pocket. I haven't decided whether or not I'd pay for the course or just try and pass the cert on my own. I don't have much experience with malicious macros, but I have dabbled in VBA a bit in the past. I do not have a college degree and cannot see myself finishing one at this point. I burned through 10 years of my GI Bill switching majors instead of just finishing something. So far the lack of degree hasn't hurt me too much. ​ Sorry for the long post - but if anyone has any insight, or can share their personal experience with a similar situation it would greatly appreciated. ​ Thanks! submitted by /u/tohitsugu [link] [comments]

Due to non definitive way to safely delete/purge a file from ssd, I was thinking to replace the disk with a traditional mechanical one and use shredding software to securely delete data using well known overwriting algorithms. Do you think it is a good approach? Thanks submitted by /u/AnotherRedditUsr [link] [comments]

Is it a piece of codes, a program, if it is , who wrote that, i just want to know more deep in its behind the hood, but the sources i found either generalize it too much or dive so deep i dont see it yet. For example say port 80 and port 443, how the computer even begin to open it , who wrote it, where is it locate in memory, can you even change modify it . I know it super basics and stupid question. Thanks in advance submitted by /u/tramquangpho [link] [comments]

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

How can I output within Autopsy via Timeline tab on which date the max. number of File events happened? Thanks. submitted by /u/Failnaught223 [link] [comments]

Malware detection accuracy through memory detection and other tools highlights how to counter increasingly evasive malware types. The post Machine Learning Versus Memory Resident Evil appeared first on Unit 42.

1    Analysis of OneNote Malware A lot of information has been circulating regarding the distribution of malware through OneNote, so I thought it would be fun to look at a sample. It turns out there are a lot of similarities between embedding malicious code into a OneNote document and the old macro/VBA techniques for Office... The post New Attacks, Old Tricks: How OneNote Malware is Evolving appeared first on TrustedSec.

GitHub 披露，未知入侵者未经授权访问了其部分代码库，窃取了其桌面应用 Desktop 和 Atom 的代码签名证书。

2022 年安全事件共 303件，损失高达37.77 亿美元。相比 2021 年的 97.95 亿美元下降约 61%。

Suricata是一种网络流量识别工具，它使用社区创建的和用户定义的signatures签名集（规则）来检查和处理网络流量。

JD Sports 近日披露了一次涉及 1000 万客户数据的网络攻击，这些客户的个人和财务信息可能已被攻击者访问。

名单上有超过 150 万名被禁飞者和超过 25 万名“被选中者”的记录。

卡巴斯基针对20多万条发布在暗网的招聘启事，分析目前网络犯罪行业的整体薪资待遇。

《三年提升计划》共计5章20条，提出33项重点工作，以及六个方面的方向和要求。

Maltego is a very useful OSINT tool. Continue reading on Medium »

作者: evilpan 原文链接: https://evilpan.com/2023/01/30/android-iptables/ 本文介绍一种在 Andorid 中实现单应用、全局、优雅的抓包方法。 此文于去年端午节编写，由于种种原因，当时藏拙并未发布。现删除一些敏感信息后分享出来，希望对各位有所启发。 背景 昨天在测试一个 Android APK 的时候发现使用 WiFi 的 HT...

作者：崎山松形 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 前言 最近在搞Iot的时候接触到Qiling框架，用了一段时间后感觉确实模拟功能挺强大的，还支持Fuzz，于是开始学习对Iot webserver这样的程序进行Fuzz。 官方给出了类似的例子如Tenda AC15 的httpd的fuzz脚本，但是也...

作者: evilpan 原文链接: https://evilpan.com/2023/01/30/android-iptables/ 本文介绍一种在 Andorid 中实现单应用、全局、优雅的抓包方法。 此文于去年端午节编写，由于种种原因，当时藏拙并未发布。现删除一些敏感信息后分享出来，希望对各位有所启发。 背景 昨天在测试一个 Android APK 的时候发现使用 WiFi 的 HT...

作者：崎山松形 本文为作者投稿，Seebug Paper 期待你的分享，凡经采用即有礼品相送！ 投稿邮箱：paper@seebug.org 前言 最近在搞Iot的时候接触到Qiling框架，用了一段时间后感觉确实模拟功能挺强大的，还支持Fuzz，于是开始学习对Iot webserver这样的程序进行Fuzz。 官方给出了类似的例子如Tenda AC15 的httpd的fuzz脚本，但是也...

Article URL: https://www.teslarati.com/electrify-america-chargers-hacking-vulnerability-bug/ Comments URL: https://news.ycombinator.com/item?id=34590230 Points: 2 # Comments: 0

Writing.  Like math in middle school, this is one of those subjects that we pushed back on, telling ourselves, "I'll never have to use this...", and then quite shockingly finding that it's amazing how much writing we actually do. However, are we doing it well, given the particular circumstances of the writing? We "write" on social media, not being too overly concerned about things like grammar, spelling, or even word choice, falling back on the old, "...you know what I meant...", or blaming auto-correct for the miscommunication. I'll be the first to admit, I'm not an "expert" at writing, nor am I "the best". But I will say that I am intentional in my writing, and this is something that's led me to...not been the result of...maintaining a blog, and publishing several books, with others in …

I am trying to identify the offset in which a buffer overflow occurs via pwntools and gdb via submission of integers and scanf. Here is the C code (x64): int input[8]; int count, num; count = 0; while(1) { printf("Enter:\n"); scanf("%d", &num); if (num == -1){ break; } else { input[count++] = num; } } Understanding that the size of the integer is 4 bytes, I am attempting to feed the program a string of integers via pwntools (code below): from pwn import * context.log_level = "debug" io = gdb.debug('_file_') for i in range(0,10,1): io.clean() io.sendline("{:d}".format(i)) io.interactive() However, I am having trouble finding the offset and trying to debug the program via gdb. I would like to be able to see changes to the stack as each integer is input (via ni or si). Is there a better way to identify where the program crashes? I am using the for loop as a proxy for pattern create (with the hope to see which integer causes the crash). Any insights would greatly be appreciated! submitted by /u/tbenson80 [link] [comments]

Article URL: https://www.bleepingcomputer.com/news/security/keepass-disputes-vulnerability-allowing-stealthy-password-theft/ Comments URL: https://news.ycombinator.com/item?id=34587387 Points: 17 # Comments: 1

First off, I just want to say that I'm very blessed to be in the current position that I'm in now. I realize that the market is tough right now and that I'm very fortunate to be having the opportunities that I have right now especially as I am leaving college. I hope that my post doesn't come off in any way as bragging/ungrateful or anything like that. I just simply want more opinions on what I should do. So I have two Internship offers for my final summer in University. The first one is for Crowdstrike and it is as an analyst for their Falcon Complete product. The second one is for IBM and it is for their penetration testing team. In terms of my career I really would like to go down the red team route, but I fear that I may be missing out on a big opportunity by not working with Crowdstrike. It seems like a lot of people have positive things to say about them and they are a pretty big name in the industry. I think I remember one redditor saying that they would work for them for free if they had the chance or something. But I have a slight/moderate dissatisfaction towards the role, I did forensics at another internship last summer and I can't really see myself doing that for years. It's a cool field, but I just don't think its for me. There is also the prospect of lay offs. Apparently there is supposed to be more layoffs around the time I'm supposed to start, so I fear that my offer may be pulled from one or the other. A couple of people in my life, have told me to accept both offers, but then just renege one of them like a week before the start dates, but doing this will for sure burn bridges and I believe that is pretty unwise especially this early in my career. Any advice on how I should approach this situation? submitted by /u/No_Actuator_6713 [link] [comments]

Hey all, I'm looking to see if there is anywhere I can get my hands dirty on Cisco or Palo Alto firewalls. My experience on these are limited but I am being nudged by a colleague for a possible job opening in lieu of these requirements. If anyone can point me in the right direction that would be phenomenal. I currently work in cyber but as an ISSO and I need something more technical before i bash my head against my monitor. If i have to buy hardware off of ebay, i will ASAP. submitted by /u/zeropyther [link] [comments]

Hi guys! I am a newbie and came across a technology, usb ports and charging cables from hak5. Apparently you stick them into phones to charge and they look like regular usbc cables from Apple or usb sticks into computer ports and they do things like key logging and whatever. The site says they do things like keystroke injection (duckyscript), mouse injection, payload slots, self destruct, geofencing, Wi-Fi trigger, full speed usb hardware keylogger, convert data exfil, and networked c2. Idk what any of this means I’m just transcribing. Anyway, does this mean like if you plug one of these into your iPhone or computer they download viruses and keyloggers forever and your device has it like herpes or is it only when it’s plugged in it can read and see what’s going on and why hasn’t Apple done anything about this? Same question applies to usb drives. And how can I counteract this? I heard you can disable the usb drive on your computer at least so it. Just doesn’t recognize the usb. Thanks! submitted by /u/Normal-Question-1994 [link] [comments]

Hi, I'm using manjaro on a little server and I would like to use ssh/sftp out of my lan. To archive this I open ssh port, redirecting it to a non standard port on router, and set up a keepass generated hard password. Is this secure enought? Thanks! submitted by /u/RuedaRueda [link] [comments]

Hey guys, I'm currently a jr app sec engineer mainly helping in secure code development and running SAST/DAST tools. I'm currently studying for AWS Security cert, but my understanding of infra is very weak. Does anyone know where they can point me in the right direction here? submitted by /u/herbertisthefuture [link] [comments]

submitted by /u/ra6907 [link] [comments]

submitted by /u/ra6907 [link] [comments]

submitted by /u/bluejazzberries [link] [comments]

Wallpapers, videos submitted by /u/cheesyvagina6 [link] [comments]

Hey Everyone! Let’s learn something new as it is going to fun learning today. Continue reading on Medium »

Simple Brief Explanation of SSRF Continue reading on Medium »

Namaste everyone, Continue reading on Pentester Nepal »

Are you curious how to find SSRF vulnerabilities yourself? If so, lets take a look at what SSRF really is and go over many details of SSRF… Continue reading on Medium »

Hi Everyone! Continue reading on Medium »

Who We Are Continue reading on Immunefi »

TL;DR- Bug hunting is a challenging task, but it can be simplified with the right tools and tactics. Continue reading on The Gray Area »

Hello everyone, I hope all is okay with you. Continue reading on Medium »

While reviewing the recent PHP Development Server <= 7.4.21 Remote Source Disclosure Vulnerability on… Continue reading on Bugrid »

Hello everyone I’m Ahmed a new learner of bug bounty known as THE ATC TH3_4TC I’m so happy share with you my first write-up of portswigger… Continue reading on Medium »

Braintrust, I am still waiting on a response from tech support, but is it possible to bring a new hash set into Axiom after processing? I don't see anything in the manual regarding this and I haven't yet played with their new remote Hash Manager (boxes are offline). Thanks. submitted by /u/Sir_Agent_Apple [link] [comments]

Unlock the power of open-source intelligence to uncover hidden truths and gain valuable insights. Continue reading on Medium »

In the world of cybersecurity, it’s pretty common when companies or individuals get affected because of cyber attacks or Data Breaches. Continue reading on System Weakness »

I will be your OSINT investigator, monitoring on your any target Continue reading on Medium »

Red teams and Blue teams are essential security components for enterprises. Read about the red team’s and blue team's skills and… Continue reading on Medium »

Using an adversarial approach, red teaming is a technique for rigorously assessing plans, rules, systems, and premises. A red team may be… Continue reading on Medium »

submitted by /u/wifihack [link] [comments]

submitted by /u/shapelez [link] [comments]

submitted by /u/Fugitif [link] [comments]

submitted by /u/CsaProtocol [link] [comments]

submitted by /u/BlackCatNeo [link] [comments]

Nacos accessToken 权限认证绕过漏洞及思考 by 君行路 SecWiki周刊（第465期) by ourren 大论文写作小技巧 by ourren php://filter过滤器利用之代码执行漏洞 by ourren 更多最新文章，请访问SecWiki

Nacos accessToken 权限认证绕过漏洞及思考 by 君行路 SecWiki周刊（第465期) by ourren 大论文写作小技巧 by ourren php://filter过滤器利用之代码执行漏洞 by ourren 更多最新文章，请访问SecWiki

Hello ;) Continue reading on Medium »

Hi there! My name is Malav Khatri, and I’m a Security Researcher. I’m going to share how I am able to get XSS in the chatbot on the… Continue reading on Medium »

乌克兰官员正在创造历史，甚至可能重塑网络战的未来。

纵深防御模型经常会被甲方、乙方拿来讨论和分析，也是甲方企业安全建设中最重要的参考模型，在实际的攻防对抗中起到非常高的价值。

美国司法部和欧洲刑警组织共同宣布，经过长达6个月的渗透，臭名昭著的Hive 勒索软件组织被FBI和国际刑警破获。

文中例举了 2022 年网安行业最受欢迎的 10 本书，欢迎大家在评论区填写个人最想要的一本，并说出理由。

一种新的活动跟踪应用程序在 Android 的官方应用程序商店 Google Play 上取得了巨大收获，其下载量已经超过2000万次。

近年来， Exchange Server 已被证明是一种十分有利可图的攻击媒介，其中的许多安全漏洞曾被用做零日攻击。

长达五个小时的微软 365全球中断是路由器IP地址变化导致其广域网中所有其它路由器之间数据包转发问题引起。

作者：维一零 原文链接：https://weiyiling.cn/one/firefox_0day_case_analysis RCE部分 在渲染进程通过一个JS脚本利用XSL对象解析的UAF漏洞执行远程ShellCode。 漏洞原理 利用程序首先定义一些XML，内部包含多个XSL对象。 随后调用transformToDocument方法导致Convert函数被调用。 Convert函数...

作者：wh1t3Pig 原文链接：《基于代码属性图的自动化漏洞挖掘实践》 0 前言 应用程序分析技术挖掘应用漏洞一直以来都是学术界和工业界的研究重点之一。从最初的正则匹配到最近的代码属性图挖掘方案，国内外有很多来自不同阶段的安全工具或商业产品来发掘程序代码的安全问题。在 Java 语言方面，业界已经有了不少出色的产品，如 CodeQL 等，但是，多数产品考虑的角度是从甲方视角或开源视角出发的...

作者：维一零 原文链接：https://weiyiling.cn/one/firefox_0day_case_analysis RCE部分 在渲染进程通过一个JS脚本利用XSL对象解析的UAF漏洞执行远程ShellCode。 漏洞原理 利用程序首先定义一些XML，内部包含多个XSL对象。 随后调用transformToDocument方法导致Convert函数被调用。 Convert函数...

作者：wh1t3Pig 原文链接：《基于代码属性图的自动化漏洞挖掘实践》 0 前言 应用程序分析技术挖掘应用漏洞一直以来都是学术界和工业界的研究重点之一。从最初的正则匹配到最近的代码属性图挖掘方案，国内外有很多来自不同阶段的安全工具或商业产品来发掘程序代码的安全问题。在 Java 语言方面，业界已经有了不少出色的产品，如 CodeQL 等，但是，多数产品考虑的角度是从甲方视角或开源视角出发的...

submitted by /u/dmchell [link] [comments]

TOPICS Continue reading on The Sleuth Sheet »

On parle de plus en plus de l’investigation numérique et ses multiples méthodes. Voici quelques ressources pour découvrir cette discipline. Continue reading on Medium »

If you only knew how many mistakes the administrators of political Telegram channels make… One of the most popular mistakes is leaving the… Continue reading on Medium »

Neural network technologies included in ChatGPT (https://openai.com/blog/chatgpt/) are beginning to be used everywhere. The simplest and… Continue reading on Medium »

Summary of the espionage-related news stories for the Week 4 (January 22–28) of 2023. Continue reading on Medium »

Open Source Intelligence (OSINT) collects, analyzes, and disseminates publicly available and legally obtained information. The goal of… Continue reading on Medium »

As a professional online private investigator, I have the skills and expertise to gather the information based on your need, to make… Continue reading on Medium »

As an OSINT (Open-Source Intelligence) service provider, I am excited to offer my expertise and tools to individuals and businesses… Continue reading on Medium »

Same tactics, different enemy, another day…. Continue reading on Medium »

Kullanımı çok basit olması ile birlikte sızma testinde bilgi toplama aşamasında işimize yarayabilecek bir araç. Bilgileri Google, Shodan… Continue reading on Medium »

In this video, we will explore the skills and knowledge needed to become a hacker. From understanding different types of hackers and their… Continue reading on Medium »

Hello I’m Amr Mustafa AKA DrakenKun Continue reading on Medium »

Hello everyone, today I’m going to talk about a bug I have found only once and other hackers told me it’s kinda rare, but It’s so simple… Continue reading on Medium »

During bug hunting in a private bug bounty program, I came across a feature within the application that allowed for the generation of PDF… Continue reading on Medium »

What is SQL Injection Continue reading on Medium »

Hello Guys, It is been a very long time since I wrote a bug bounty write-up. Without any delay let’s get into it. Continue reading on Medium »

What is an open Redirect? Continue reading on Medium »

What Is Directory Traversal? Continue reading on Medium »

JWT: The Weak Link in Your Security Chain? Understanding and Addressing JWT-related Threats Continue reading on InfoSec Write-ups »

submitted by /u/achilles4828 [link] [comments]

Overview If you have open positions at your company for information security professionals and would like to hire from the /r/netsec user base, please leave a comment detailing any open job listings at your company. We would also like to encourage you to post internship positions as well. Many of our readers are currently in school or are just finishing their education. Please reserve top level comments for those posting open positions. Rules & Guidelines Include the company name in the post. If you want to be topsykret, go recruit elsewhere. Include the geographic location of the position along with the availability of relocation assistance or remote work. If you are a third party recruiter, you must disclose this in your posting. Please be thorough and upfront with the position details. Use of non-hr'd (realistic) requirements is encouraged. While it's fine to link to the position on your companies website, provide the important details in the comment. Mention if applicants should apply officially through HR, or directly through you. Please clearly list citizenship, visa, and security clearance requirements. You can see an example of acceptable posts by perusing past hiring threads. Feedback Feedback and suggestions are welcome, but please don't hijack this thread (use moderator mail instead.) submitted by /u/ranok [link] [comments]

submitted by /u/Gallus [link] [comments]

Is there a way to generate a logical image of a drive with ftkimager command line interface without the unallocated space? I’m currently testing with generating E01s by using the drive’s logical path as a source, but by default, it includes the unallocated space, and it doesn’t accept folder paths, or doesn’t seem to have any attributes to exclude unallocated space. So it seems like I’m just creating a physical E01 image of a partition. Am I missing something or is it just not possible? submitted by /u/RESP-svee-T [link] [comments]

Hello everyone, I recently graduated from college and I am looking to get started in my career within computer forensics, I have done some research such as taking certs. Is there other ways I can start since money is sorta tight at the moment. Any and all advice would be helpful. submitted by /u/Plane-Quantity-651 [link] [comments]

Hello everyone I have little of experience in cyber security (6 month of working in SOC). I am making a plan on how to prepare myself for FOR500 exam. I have almost finished Practical Windows Forensics by TCM-Security which is awesome and watched 13Cubed youtube channel. I am just asking for any free or non-expensive courses to build a strong foundation submitted by /u/stas-citrus [link] [comments]

JetBlue disclosed a bug submitted by mmdz: https://hackerone.com/reports/1457736

Internet Bug Bounty disclosed a bug submitted by haqpl: https://hackerone.com/reports/1805873 - Bounty: $2400

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Article URL: https://www.vicarius.io/vsociety/blog/unauthenticated-rce-in-centos-web-panel-7-cwp-cve-2022-44877 Comments URL: https://news.ycombinator.com/item?id=34567059 Points: 1 # Comments: 1

今日俄罗斯电视台网站报道，乌克兰总统泽连斯基25日意外出现在俄罗斯电视频道上。

世界经济论坛联合埃森哲共同发布了《2023年全球网络安全展望》报告，预测未来一年影响全球经济和社会的网络安全趋势。

俄罗斯最大的IT科技公司之一Yandex的源代码仓库据传遭到前员工窃取

Here is a quick cheat sheet for Web application pen testing with FFuF: Continue reading on Medium »

Here is a quick cheat sheet for Web application pen testing with FFuF: Continue reading on Medium »

JS Enumeration is a crucial step in the process of identifying and exploiting vulnerabilities in a website. As a bug bounty hunter, you… Continue reading on Medium »

Do not send an xss report before reading this Continue reading on Medium »

Carriage Return and Line Feed In Short Bug Bounty | karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

بِسْمِ اللَّـهِ الرَّحْمَـٰنِ الرَّحِيم Continue reading on Medium »

Hello there, It’s been a long time since I wrote any article on my resolved reports due to some internal problems so today I’m going to… Continue reading on Medium »

Bug Bounty hunting is a crowdsourced cyber security model that helps companies utilize the power of the crowd to secure their… Continue reading on Shahmeer Amir »

Introduction Continue reading on Medium »

Merhaba arkadaşlar , bu yazımızda 403 kısıtlamasını aşmak için ne tür teknikler uygulayabiliriz ? Ve 403bypass aracını kullanarak hızlı… Continue reading on Medium »

Hello everyone, my name is Koroush, (aka whiteOwl).  In this write-up, I will be discussing the methods I used to bypass the site’s input… Continue reading on Medium »

Mail Header Injection Nedir? Continue reading on Medium »

Task 1 Introduction Continue reading on Medium »

OSINT tools for Cyber security Continue reading on Medium »

OSINT, or Open-Source Intelligence, is the process of collecting, analyzing, and disseminating information from publicly available sources… Continue reading on Medium »

Walkthrough about an OSINT Quiz challenge. Continue reading on Medium »

Understanding all the sources of threat data becomes intuitive if we can visualize cyberspace. Continue reading on Pagesweturned —  Curie »

Understanding all the sources of threat data becomes intuitive if we can visualize cyberspace. Continue reading on Medium »

成体系：大论文的另一关键环节 by ourren 更多最新文章，请访问SecWiki

成体系：大论文的另一关键环节 by ourren 更多最新文章，请访问SecWiki

美国自2020年起，连续两年举办太空信息安全大赛“黑掉卫星（Hack-A-Sat）”，本文介绍了Hack-A-Sat黑掉卫星挑战赛的利用维护接口dump卫星平台内存这道赛题。

Java代码审计项目--indedu因酷在线教育开源系统，这个一个SSM架构的开源框架

俄罗斯最大的IT科技公司之一Yandex的源代码仓库据传遭到前员工窃取，相关数据已在某个流行黑客论坛上以BT种子形式泄露。

Java的数据类型在执行过程中存储在两种不同形式的内存中：栈（stack）和堆（deap），由运行Java虚拟机（JVM）的底层平台维护。

最近写了点反序列化的题，才疏学浅，希望对CTF新手有所帮助，有啥错误还请大师傅们批评指正。首先我们需要理解什么是序列化，序列化是将变量或对象转换成字符串的过程，用于存储或传递 PHP 的值的过程中

乌克兰计算机应急响应小组在该国国家新闻机构的网络上发现了五种不同的数据擦除恶意软件组合

Salamandra是一款功能强大的麦克风窃听检测工具，该工具可以帮助广大研究人员在封闭环境中检测和定位间谍麦克风工具。

Vegile是一款针对Linux系统设计和开发的强大后渗透测试工具，允许对目标可信网络执行更加深入的渗透测试与安全分析。

Hello, It is time for me yo get a serious password manager... at the moment I'm using Google, but I feel I'm "playing with fire" lol After the lastpass saga, I now have doubts about the all concept.... I was thinking that bitwarden + yubikey seems to be the most secure option put there.... In theory, even in ma master password gets compromised , without my physical yubikey, nobody can access... correct? Or the lastpass issue would be anyhow pet password at risk also with yubikey? Mmmm I am a bit confused... submitted by /u/IP_FiNaR [link] [comments]

Before reading the second part, go and read part 1 https://medium.com/@indhumathi19973/analyzing-javascript-files-part-1-9b07eb8cfb8e Continue reading on Medium »

Use ChatGBT to Find Vulnerabilities and to Learn about Vulnerabilities | Karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

What happened with Bug Zero? Continue reading on Bug Zero »

Halo semuanya, kali ini saya mau menceritakan bagaimana saya bisa menemukan sebuah celah pada sebuah website salah satu website restoran… Continue reading on Medium »

I have discovered a Reflected XSS vulnerability in shaadi.com, it means that an attacker can inject malicious code into the website, which… Continue reading on Medium »

This article discusses the pros and cons of bug bounty programs and how they can be useful for organizations. Continue reading on Medium »

TL;DR- Today, we’ll take a look at some steps and examples of phenomenal bug hunting write-ups that are used to get even higher bounties. Continue reading on The Gray Area »

Article URL: https://github.com/microsoft/restler-fuzzer Comments URL: https://news.ycombinator.com/item?id=34552574 Points: 6 # Comments: 0

Article URL: https://ludovicianul.github.io/2023/01/26/vault-api-fuzz-part1/ Comments URL: https://news.ycombinator.com/item?id=34545710 Points: 3 # Comments: 0

Article URL: https://ioc.exchange/@FuzzingWeekly/109760561292096797 Comments URL: https://news.ycombinator.com/item?id=34544360 Points: 1 # Comments: 0

I'm trying to understand how these physical keys work. So far I found: https://www.fastmail.com/blog/how-u2f-security-keys-work/ If i simply open up a text editor, plug in the key and press the button I get a random 6 digit number, is that the nonce? I assume the same process happens if I use USB or NFC? How are those random numbers generated? True randomness is hard. Is the secret key unique to every devise a manufacturer creates? If I buy a key from a shady guy on the corner and he just cloned every key to save money so that every key has the same secret key and generates the same random numbers then any key can access any account? Is that a realistic scenario with so many devices made by the lowest bidder in China? Alternatively the random number generator and the private key generator the factory uses can be flawed in which case the auth can be brute forced? Thanks. submitted by /u/lmow [link] [comments]

As the LastPass saga is cooling off, I ender if other password managers (e.g bitwarden) could have same issue... or maybe the master password is only stored in each one machine/phone.. Ideas? Thank you submitted by /u/IP_FiNaR [link] [comments]

IT student here, but just curious are you supposed to backup your domain controller? For your active directory? It seems like that would be a smart thing to do. Also, when it comes to Saas applications do most organizations just rely on the vendor for data backups or do most organizations have their own method to backup a cloud/Saas applications data? submitted by /u/SmarterTogether [link] [comments]

I'm learning about ssh-keygen and how to generate the public keys. Daily, when I connect to a remote ip I use ssh. Just in the case about github or gitlab I used the steps to generate a pair of keys and sending it to the remote server. I didn't stop to understand how it works and not even if this is the more secure way to connect. So, making a pair of key in RSA or ed25510, coping to the ip and using the pass phase it's more secure than regular credentials? What are the cons about logging this way? Someone getting the key somehow? getting my pass phrase? Explaining would be very welcome :) submitted by /u/MrNoodlesLearns [link] [comments]

I have 1 hard drive with 2 partitions, will bitlocker encrypt both? Do I encrypt only used space or all? If only used, what happens to the unused, does it get encrypted as space is written to it? submitted by /u/foxtrot90210 [link] [comments]

Thoughts on Detection Engineering I read something online recently that suggested that the role of detection engineering is to reduce the false positive (FPs) alerts sent to the SOC. In part, I fully agree with this; however, "cyber security" is a team sport, and it's really incumbent upon SOC and DFIR analysts to support the detection engineering effort through their investigations. This is something I addressed a bit ago in this blog, first here, and then here.  From the second blog post linked above, the most important value-add is the image to the right. This is something I put together to illustrate what, IMHO, should be the interaction between the SOC, DFIR, threat hunting, threat intel, and detection engineering. As you see from the image, the idea is that the output of DFIR work,…

U.S. Dept Of Defense disclosed a bug submitted by theinternetofdefcon_: https://hackerone.com/reports/1822160

U.S. Dept Of Defense disclosed a bug submitted by alishah: https://hackerone.com/reports/1799562

U.S. Dept Of Defense disclosed a bug submitted by maskedpersian: https://hackerone.com/reports/1814335

U.S. Dept Of Defense disclosed a bug submitted by notajax: https://hackerone.com/reports/1825942

TikTok disclosed a bug submitted by mrhavit: https://hackerone.com/reports/1733627 - Bounty: $5500

TikTok disclosed a bug submitted by s3c: https://hackerone.com/reports/1683129 - Bounty: $5000

EXNESS disclosed a bug submitted by siddharthamx: https://hackerone.com/reports/1446107 - Bounty: $500

8x8 disclosed a bug submitted by xdopa: https://hackerone.com/reports/1826892

TikTok disclosed a bug submitted by mrhavit: https://hackerone.com/reports/1793940 - Bounty: $500

submitted by /u/atoponce [link] [comments]

submitted by /u/dlorenc [link] [comments]

submitted by /u/c0r0n3r [link] [comments]

submitted by /u/EnableSecurity [link] [comments]

submitted by /u/SonarPaul [link] [comments]

submitted by /u/Gallus [link] [comments]

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Main index is here https://www.footnoteconspiracy.com/ The comedy (radio?) shows and mp3 conversions, are in /datadump/ so that's a good place to start. submitted by /u/little_maggot [link] [comments]

Believe it or not, it's January once again. And this can mean only one thing - it's time to update you on the changes we've got in store for Burp Suite over the next six months.     But this

We launched the Burp Suite Certified Practitioner (BSCP) certification at the end of 2021 due to growing demand from Burp Suite Professional customers. Spanning everything from classic vulnerability c

Believe it or not, it's January once again. And this can mean only one thing - it's time to update you on the changes we've got in store for Burp Suite over the next six months.     But this

We launched the Burp Suite Certified Practitioner (BSCP) certification at the end of 2021 due to growing demand from Burp Suite Professional customers. Spanning everything from classic vulnerability c

Researchers built a coverage guided fuzzer, DeepHunter, for protecting DNN’s against malicious attacks. Continue reading on Medium »

Critical RCE Vulnerabilities Found in git (CVE-2022–4190, CVE-2022–23251)… Continue reading on Medium »

Researchers built a coverage guided fuzzer, DeepHunter, for protecting DNN’s against malicious attacks. Continue reading on Medium »

Critical RCE Vulnerabilities Found in git (CVE-2022–4190, CVE-2022–23251)… Continue reading on Medium »

We recap our research on privilege escalation and powerful permissions in Kubernetes and analyze the ways various platforms have addressed it. The post Mitigating RBAC-Based Privilege Escalation in Popular Kubernetes Platforms appeared first on Unit 42.

Hello everyone. I'm looking to buy a MacBook Pro with M1/M2 Pro architecture and was wondering if any of you have any experience running x86 executables within a Windows ARM VM. I first assumed it was impossible to run x86s (since Rosetta only works within Linux ARM VMs), but I've subsequently heard that it is now doable. Have any of you had the chance to try? If so, how is your performance? submitted by /u/samaritan_o [link] [comments]

I've submitted the form on their website through my work. I've even spoken with a sales person, but I'm on day 3 now without a download link. submitted by /u/Scrant0nStr4ngler [link] [comments]

Article URL: https://memgraph.com/blog/efficient-threat-detection-in-cybersecurity-with-memgraph Comments URL: https://news.ycombinator.com/item?id=34544326 Points: 2 # Comments: 0

Article URL: https://adamdoupe.com/blog/2023/01/23/cve-2023-23504-xnu-heap-underwrite-in-dlil-dot-c/ Comments URL: https://news.ycombinator.com/item?id=34542007 Points: 1 # Comments: 0

يظهر تشريح فيديو وزارة الدفاع قيام مصر بمراقبة الشريط الحدودي مع غزة بما يزيد عن ١٢٠ كاميرا مراقبة منتشرة من البحر الي معبر كرم ابوسالم Continue reading on Medium »

This is just an introduction, follow for the up comming series on hacking . Continue reading on Medium »

submitted by /u/dmchell [link] [comments]

submitted by /u/dmchell [link] [comments]

This will be a setup guide for XSSHunter and integrating it with Discord Continue reading on InfoSec Write-ups »

Using MX-Takeover is a Go tool that automatically takes over email subdomains services when they become available Continue reading on InfoSec Write-ups »

Stay informed and protect yourself and your organization against Ransomware, Phishing, Advanced persistent threats, IoT threats, Cloud… Continue reading on InfoSec Write-ups »

No content preview

No content preview

Follow these steps to get from a beginner to a pro in AWS security Continue reading on InfoSec Write-ups »

With xsshunter.com shutting down setting up your own xsshunter will be more important. This script will make it a lot easier Continue reading on InfoSec Write-ups »

This will be a setup guide for XSSHunter and integrating it with Discord Continue reading on InfoSec Write-ups »

Using MX-Takeover is a Go tool that automatically takes over email subdomains services when they become available Continue reading on InfoSec Write-ups »

Stay informed and protect yourself and your organization against Ransomware, Phishing, Advanced persistent threats, IoT threats, Cloud… Continue reading on InfoSec Write-ups »

No content preview

No content preview

Follow these steps to get from a beginner to a pro in AWS security Continue reading on InfoSec Write-ups »

With xsshunter.com shutting down setting up your own xsshunter will be more important. This script will make it a lot easier Continue reading on InfoSec Write-ups »

This will be a setup guide for XSSHunter and integrating it with Discord Continue reading on InfoSec Write-ups »

Using MX-Takeover is a Go tool that automatically takes over email subdomains services when they become available Continue reading on InfoSec Write-ups »

Stay informed and protect yourself and your organization against Ransomware, Phishing, Advanced persistent threats, IoT threats, Cloud… Continue reading on InfoSec Write-ups »

No content preview

No content preview

Follow these steps to get from a beginner to a pro in AWS security Continue reading on InfoSec Write-ups »

With xsshunter.com shutting down setting up your own xsshunter will be more important. This script will make it a lot easier Continue reading on InfoSec Write-ups »

拳头公司承认遭遇了黑客攻击，英雄联盟、云顶之弈以及反作弊平台的源代码被盗。

Le géant de l’intelligence du Big data a officiellement annoncé soutenir l’armée ukrainienne. Analyse pointue du territoire et captation… Continue reading on Medium »

How to Use the Security Tool AMASS Continue reading on Medium »

AMASS (Attack Surface Mapping and Asset Discovery) is a security tool that can be used to discover subdomains and assets associated with a… Continue reading on Medium »

submitted by /u/dmchell [link] [comments]

submitted by /u/dmchell [link] [comments]

Have searched for an answer and looked at the SO docs and cant find the answer to this problem. Getting logs into SO just fine and can see "all logs" count going up. Issue is when I click on any data that has a blue hyperlink instead of Kibana drilling down I get a new browser window with a message saying "application not found". Can anybody point me to documentation as to how I fix this? submitted by /u/Sho_nuff_ [link] [comments]

Hello, I'm trying to see what data do apps send and receive from their servers using mitmproxy. For a long time, I had no problems decrypting HTTPS with the certificate installed, but since December, I get "Client TLS handshake failed" errors, both when I'm routing curl through proxy on my host machine and when I'm routing Android through the proxy. It happens when I use mitmproxy from my packge manager, Linux binary from mitmproxy's website, building it from git and using it through Docker, both when using my user and different user account. However, when using mitmproxy on a virtual machine with the same operating system (Arch Linux), I get no errors. It only happens in HTTP proxy mode, not in SOCKS5 mode. On mitmproxy's bugtracker I got redirected to discussions section and got ignored. Command with which I start mitmproxy: mitmdump --verbose curl command: curl -x http://127.0.0.1:8080 https://google.com mitmproxy output: ``` [19:47:26.419] HTTP(S) proxy listening at *:8080. [19:47:27.456][127.0.0.1:42784] client connect [19:47:27.476][127.0.0.1:42784] server connect google.com:443 (142.250.203.142:443) [19:47:27.588][127.0.0.1:42784] Client TLS handshake failed. The client may not trust the proxy's certificate for google.com (OpenSSL Error([('SSL routines', '', 'tlsv1 alert decrypt error')])) [19:47:27.589][127.0.0.1:42784] client disconnect [19:47:27.589][127.0.0.1:42784] closing transports... [19:47:27.589][127.0.0.1:42784] server disconnect google.com:443 (142.250.203.142:443) [19:47:27.590][127.0.0.1:42784] transports closed! ``` curl output: curl: (35) OpenSSL/3.0.7: error:0200008A:rsa routines::invalid padding mitmproxy --version output: ``` Mitmproxy: 9.0.1 Python: 3.10.9 OpenSSL: OpenSSL 3.0.7 1 Nov 2022 Platform: Linux-6.1.8-arch1-1-x86_64-with-glibc2.36 ``` submitted by /u/greenhaveproblemexe [link] [comments]

Hi there, I currently study these products. Has anyone worked with them? What are the main differences (except GUI)? They all as I see based on ELK stack. I had never heard of UTMstack and had little information about it. submitted by /u/athanielx [link] [comments]

I'm currently learning web development and was interested in exploring the networking and security aspect of it too. Was wondering if I could do so and if yes, which resources would you recommend? submitted by /u/god_of_hypocrites17 [link] [comments]

I've been experiencing a fair bit of cyber attacks, and I am wondering if my ASUS ROG Falchion keyboard might have been spiked a bit - when I plug it in on Windows is see 2 new keyboards and 1 new mouse show up. Before plugging in: https://imgur.com/a/1lyRZpP After plugging in: https://imgur.com/a/lapQSpy On Linux, using "tail -f /var/log/kern.log /var/log/syslog" I get this output: ==> /var/log/syslog /var/log/kern.log /var/log/syslog <== Jan 26 02:25:11 pop-os kernel: [16688.704200] usb 3-1: New USB device found, idVendor=0b05, idProduct=193c, bcdDevice= 3.16 J…

Does anyone have any suggestions for a cheap or free program to view .vcf or if it's included in an existing forensic suite and I'm just missing it? submitted by /u/dgree049 [link] [comments]

Article URL: https://www.akamai.com/blog/security-research/exploiting-critical-spoofing-vulnerability-microsoft-cryptoapi Comments URL: https://news.ycombinator.com/item?id=34536361 Points: 1 # Comments: 0

Article URL: https://unit42.paloaltonetworks.com/realtek-sdk-vulnerability/ Comments URL: https://news.ycombinator.com/item?id=34531380 Points: 2 # Comments: 0

Article URL: https://www.akamai.com/blog/security-research/exploiting-critical-spoofing-vulnerability-microsoft-cryptoapi Comments URL: https://news.ycombinator.com/item?id=34529259 Points: 1 # Comments: 0

Bypass the Password and Biometrics Functionalities Continue reading on Medium »

A website bug is an error or malfunction that occurs on a website, which can cause it to behave in unexpected ways or prevent it from… Continue reading on Medium »

Hii amigos today we are going to discuss about XSS vulnerability listed also known as Cross-site-Scripting vulnerability which is regarded… Continue reading on Medium »

Network and Port scanning is like going around a house and observing which doors and windows are open and who is standing on them. Continue reading on Medium »

TL;DR- A bug hunting walkthrough on a critical-level FTP vulnerability that was alarmingly simple to find and validate. Continue reading on The Gray Area »

I want to shift more towards evasion. I’m lowkey familiar with the theory around unhooking, direct/indirect system calls etc, but don’t know which technique to focus on to get started. From what I understand direct system calls are not relevant anymore on newer versions of windows and for unhooking, the calls needed to unhook might be hooked? Some enlightment here would be amazing thanks! submitted by /u/MickeyDB01 [link] [comments]

记一次Webshell检测引擎绕过测试 by ourren 更多最新文章，请访问SecWiki

记一次Webshell检测引擎绕过测试 by ourren 更多最新文章，请访问SecWiki

由美国司法部、联邦调查局、特勤局、欧洲刑警组织以及德国 BKA 和 Polizei组成的国际执法行动，将Hive 勒索软件数据泄露站点查获。

submitted by /u/RedTeamPentesting [link] [comments]

submitted by /u/pipewire [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/mckirk_ [link] [comments]

submitted by /u/Robbedoes_ [link] [comments]

submitted by /u/thehunter699 [link] [comments]

GitHub disclosed a bug submitted by ahacker1: https://hackerone.com/reports/1711938 - Bounty: $20000

PlugX remains an active threat. A newly discovered variant infects USB devices and a similar variant makes copies of PDF and Microsoft Word files. The post Chinese PlugX Malware Hidden in Your USB Devices? appeared first on Unit 42.

tarponise Continue reading on Medium »

One of the main problems with Red Team engagements is gaining initial access to the target organisation if no exploitable vulnerabilities… Continue reading on Medium »

Hi semua sudah lama tidak update tulisan pada blog ini. Maka pada tulisan kali ini saya akan membagikan writeup dari mechine tryhackme… Continue reading on Medium »

http://193.93.60.30/ submitted by /u/deadjdona [link] [comments]

Hi In my current company we use conditional access policies for AD Was wondering what some Microsoft Defender for Cloud Apps, Microsoft Security and Microsoft AD functions, policies and practices are to adopt. Like what do you your company currently utilise? We are a Microsoft house and I am always very keen to get my hands dirty and implement new countermeasures Thanks again submitted by /u/moneyzaa [link] [comments]

Hello! Does anybody have any info about the aptitude test, types of questions, score needed to pass.. etc submitted by /u/Bojangles_BBN [link] [comments]

We've found an Android device in our guest wireless zone that's regularly connecting over port 80 to a VPS in Canada (I'm in USA) early in the morning or very late at night. So far I haven't been able to correlate it to a custodian based on entrance times. The data transmitted is usually less than 20k, though occassionally a larger chunk between 500-600k. I'm not terribly concerned about it since that network is tightly isolated, but it looks like something beaconing out and I'm very curious to get to the bottom before I just outright block it. I only have a few packets to analyze and I can't see much since the data is scrambled. submitted by /u/EnterNam0 [link] [comments]

A Client of Mine ist infected with some Kind of remote Access/control vnc Software. Probably a RAT for Windows 10. Firewalls and Antivirus Software does Not find anything. Manually checking Autostarts, Sheduler, Services and so in didnt Bring up any suspicious process. (Iam not a Infosec Professional, Just an Administrator). So this Guy actually Made fun of me and chatted with me inside a Text File and disrupts my and the employes Work by clicking and opening Programm, installing Games and doing a Lot of HOAX. I tried to capture Open Ports and IP Adresses via Netstat, but of course everytime i so some Research, he Just closes my remote Support Application. Iam Not Sure If forensics could find anything when i unplug this Computer from the Internet. Probably there are some Automatic cleanup / rename tasks. What would be the poper way to react?. We closed all outgoing Ports of the Firewall and whitelisted the Essential Ports. Problem Port: 443.how can secure HTTPS? I found an old OpenSSH Installation and iam Not Sure If the attacker encrypts His RAT/VNC/SSH actions via Putty (for example) and hides its Traffic in HTTPS Traffic. Geoblocking is active. Still useless If He is behind a vpn or proxie casquade. Making Things more complicated, he shared some information within our Chat which indicate (prove) that He or she is an employes in the Same company. He even explained why He is Manipulation this exact Workstation and co-workers. Best regards Civil submitted by /u/IndependenceCivil175 [link] [comments]

At our company we're looking at adding and sharing information, including images, of what our official communications looks like so they can spot real letter/emails/texts from us from fake ones. Similar to these companies https://www.royalmail.com/help/scam-examples https://www.britishgas.co.uk/help-and-support/my-account/if-you-get-a-suspicious-email Anyone got experience of this in their company or want to share advice on what to avoid or recommendations so we help our customers without helping criminals! A fine line to balance! submitted by /u/TWateride [link] [comments]

Hello, folks! I am preparing for the OSCP, currently going through TjNull's List. Today I was solving Healthcare-1 from Vulnhub. It has OpenEMR v4.1.0 (sry for the spoiler) which has SQLi exploit. https://www.exploit-db.com/exploits/49742I have 3 options: SQLMAP (not allowed in the exam) Do it manually (ahh, Blind SQLi will take forever) Use available scripts as mentioned above. My Question : Can we use these kind of scripts on the exam? PS: Asking this here cause I could not post on r/OSCP (It shows post is removed;my karma is low) and don't know where should I ask this. Yeah I'm new to reddit. submitted by /u/doubleo10 [link] [comments]

Bypass Filter: Continue reading on Medium »

Dexalot ek non-custodial, decentralized cryptocurrency exchange hai jisme ek Central Limit Order Book capability hai. Avalanche dwara… Continue reading on Dexalot »

Introduction Continue reading on Immunefi »

Olá pessoas, esse é o meu primeiro artigo aqui no medium. Nesse primeiro artigo, vou contar como eu consegui encontrar e explorar a… Continue reading on Medium »

According to tradition, it’s time to recall 10 of the most interesting warnings that PVS-Studio found during 2022. Continue reading on PVS-Studio »

In this post, I will show you how Race Condition can be critical. Continue reading on Medium »

Whoami: Althaf Continue reading on Medium »

Multiple Credentials Per Request - PortSwigger Lab Walkthrough Continue reading on System Weakness »

Beware of these kinds of messages. Of course, it won’t affect iPhone users. But, I tried checking out the link, It basically downloads an… Continue reading on Medium »

TOPICS Continue reading on The Sleuth Sheet »

submitted by /u/Ano_F [link] [comments]

submitted by /u/ljulolsen [link] [comments]

submitted by /u/andreashappe [link] [comments]

submitted by /u/Mempodipper [link] [comments]

Fiora：漏洞PoC框架Nuclei的图形版 by 路人甲 各种架构ELF后门生成工具 by 路人甲 DARPA的可解释人工智能程序 by ourren 更多最新文章，请访问SecWiki

Fiora：漏洞PoC框架Nuclei的图形版 by 路人甲 各种架构ELF后门生成工具 by 路人甲 DARPA的可解释人工智能程序 by ourren 更多最新文章，请访问SecWiki

本篇是”手上有啥就搞啥“系列的第四篇，研究对象是H3C TC2100 智能摄像头(云台)，侧重点是流量截取和协议分析。

Continue reading on Posts By SpecterOps Team Members »

Epyon is a swiss army knife tool for pentesting DevOps ecosystems. It has multiple modules for performing actions in common DevOps systems. Continue reading on Morphus Labs »

Primera Parte. Continue reading on Red Squadron »

The red team is regarded as the aggressive part of the security apparatus. Continue reading on TheSecMaster »

Vegeta is one of the vulnerable boxes on VulnHub. VulnHub advertises “This box is an easy box for the complete beginner.” Vegeta is what I… Continue reading on Medium »

Research shows that Java and .Net vulnerabilities occur more often and are left un-fixed more frequently than languages like Javascript… Continue reading on System Weakness »

Research shows that Java and .Net vulnerabilities occur more often and are left un-fixed more frequently than languages like Javascript… Continue reading on System Weakness »

submitted by /u/ragnarsecurity [link] [comments]

Made a survey to get a feel on the DFIR industry and salary. You can fill it out here I want to try to get an Idea of salary ranges and backgrounds of people in the field. This may work out, it may not but made a google form if you can just fill it out. The questions if anyone has a question they think I should add let me know: Education background How many years have you been in the DFIR field Do you hold any certifications from the following vendors Are you currently happy with your current job Would you consider yourself overworked or burnt out What is your current salary What is your job role (select all the applies) Role level Do you feel underpaid How many times have you swapped jobs/companies Are you Law Enforcement or Private Sector What advice would you have for recent graduates or newcomers to the DFIR community I'll be closing this out Feb 1st and then supply the results. submitted by /u/MDCDF [link] [comments]

1 引言 2 k8s 资源模型 2.1 Node 资源抽象 2.1.1 Capacity 2.1.2 Allocatable 2.1.3 Allocated 2.2 Node 资源切分（预留） 2.2.1 SystemReserved 2.2.2 KubeReserved 2.2.3 EvictionThreshold（驱逐门限） 2.2.4 Allocatable 2.3 kubelet 相关配置参数 3 k8s cgroup 层次设计 3.1 cgroup 基础 3.2 kubelet cgroup runtime driver 3.3 kubelet cgroup 层级 3.1.1 Container 级别 cgroup 3.1.2 Pod 级别 cgroup 3.1.3 QoS 级别 cgroup 3.1.4 Node 级别 cgroup 3.3 cgroup (v1) 配置目录 3.3.1 kubelet cgroup root 3.3.2 /kubepods（node 级别配置） 3.3.3 QoS 级别配置 3.3.4 Pod 级别配置 3.3.5 Container 级别配置 4. 问题讨论 4.1 requests/limits 对应到具体 cgroup 配置文件 4.1.1 CPU 4.1.2 Memory 4.1.3 其他 4.2 requests/limits 与调度的关系 4.2.1 根据 requests 调度 4.2.2 根据 limits 限额（enforcement） 4.3 kubelet 计算 pod requets/limits 的过程 4.4 资源使用量超出 limits 的后果 4.5 Node 资源紧张时，按 …

TryHackMe’s Takeover Simple Walkthrough | Karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

I’ve already discussed the legion tool. It is a tool for scanning targets via a graphical user interface. View it now Continue reading on Medium »

Nmap, which stands for Network Mapper, is a free and open source programme used for port scanning, vulnerability analysis, and, obviously… Continue reading on Medium »

Portswigger Lab Simple Solution — SQL Injection | Karthikeyan Nagaraj Continue reading on Medium »

What are IDORs? Continue reading on Medium »

The following vulnerability was reported in a self-hosted bug bounty program. The program reported that it was a duplicate. I find it… Continue reading on Medium »

Hi all, I would like to learn little bit about network communication from the mobile device applications (so probably http/s calls to remote applications APIs). What are the possibilties to intercept mobile device by some tracing network tool capturing remote network calls? I'm not sure, if something like this exists directly as mobile application, but I mean something like Burp suite, where I can point my mobile phone and capture all exchanged traffic. For testing I would use my old rooted OnePlus One mobile). Does anyone have experience with similar setup? submitted by /u/woky_s [link] [comments]

Hi We are utilising hybrid cloud in our company so we are using Azure AD with on-prem AD sync Recently, I noticed a lot of repeat brute force attempts on a few of our users Was wondering what measures I could implement within Azure AD What do you do your in company, should I put an account lockout or implement a timer which locks the account temporarily and makes the user call IT? submitted by /u/moneyzaa [link] [comments]

Just wondering what u guys use to make a report of data from phishing campaigns or any other data. I tried PowerBI but my manager didn’t like it. I just want a nice visual with charts and bars so it looks good when presenting. Any thoughts? submitted by /u/Puzzleheaded-Try5749 [link] [comments]

Hi /r/netsec! Over the last month or so, I've received a handful of SMS messages that seem to be 2FA-related, and that I don't recognize (and didn't request myself). I'm wondering whether I should be worried, and if so how I should best proceed. The SMS messages are from the number 59872 and are formatted as follows: ALERT! DO NOT share this code with anyone. We will never ask you for this code. Verification Code: XXXXXX (expires in 3 minutes) (X's represent the redacted code.) Around the same time as one of these message, I also received one phone call (not answered) from +1 (714) 707-3260 with caller ID "Verify", along with a voice message that just says 4 digits and then "Goodbye". I can think of a few possibilities for what's going on: Someone has my password for some serv…

Just posting it here because I have had other experts asking about it. There is a thing called iMessage Cloud sync where Apple will not include iMessages in backups but "sync" the data in the cloud. If you use a tool like Elcomsoft PPB to download the backup you won't get the messages. You can download the messages using the "Download Sync'd data" function but it is a pain in the ass to work with and parse. The counter-intuitive solution is to have the user go on the phone, (assuming that you don't have direct access to the phone which is why you are doing iCloud in the first place, and need to have the user do it,) and go to iCloud settings, there is a slider bar for messages and you need to turn it off. Yes it seems weird but you need to turn off messages. You will then get a warning that says your messages will no longer be stored in the cloud. Wait overnight for the phone to do a regular backup and the messages and attachments should all be there. I did one this week that was 4gb before turning messages off and 30gb after. The second iCloud download had all the stuff I was looking for. ​ TLDR: Before you download an iCloud as an alternative to copying a phone directly, make sure the slider for iMessages is OFF in the settings, it is counter-intuitive but Apple won't back up the messages to iCloud unless that is off. It may be that you have them check, if it is on, cut it off and call them back the next day. Let me know if anyone has any questions. submitted by /u/ellingtond [link] [comments]

So I'm being asked to use FTK Image Lite to search for some data on our share but I'm not able to find a "free" download for it that doesn't seem sketchy. Is it still a free product? Anyone have a good link? submitted by /u/SomeWhereInSC [link] [comments]

Hi all, Where on an iPhone (an iPhone 5 to be exact) is stored what the phone syncs with and what exactly is synced. Thanks in advance submitted by /u/AartdB [link] [comments]

Hi, Read an article mentioning printer steganography, read more articles/pages about this https://en.wikipedia.org/wiki/Machine_Identification_Code https://www.bbc.com/future/article/20170607-why-printers-add-secret-tracking-dots https://blog.erratasec.com/2017/06/how-intercept-outed-reality-winner.html#.Y8-t4oTP3QF https://www.eff.org/pages/list-printers-which-do-or-do-not-display-tracking-dots Now it seems that this was primarily done to tackle the counterfeit currency problems only in colored laser printers. Here are my two questions- As per the last link above, all the printers in that list (which is not being updated anymore) are colored laser printers. They were not doing this in inkjet printers? Black and white laser and inkjet printers cannot be used to print currency for obvious reasons. But are they leaving identifiers like this https://upload.wikimedia.org/wikipedia/commons/7/73/Machine_Identification_Code.png on black and white prints printed via black and white laser and inkjet printers? If yes then how to identify them? I don't have access to blue/uv light so cannot check and confirm. Thanks submitted by /u/becool773 [link] [comments]

submitted by /u/plsaskmecom [link] [comments]

submitted by /u/vonahisec [link] [comments]

submitted by /u/n00py [link] [comments]

submitted by /u/MiguelHzBz [link] [comments]

submitted by /u/exploding_nun [link] [comments]

submitted by /u/karimhabush [link] [comments]

submitted by /u/nibblesec [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/dmchell [link] [comments]

As title provided, I’m interested to hear your findings / thoughts! Doing research. submitted by /u/Cyberkitty08 [link] [comments]

SecWiki周刊（第464期) by ourren CVE-2022-41080_41082 Microsoft Exchange Server OWASSRF远程代码执行漏洞分析 by ourren 自动化提取恶意文档中的shellcode by ourren 更多最新文章，请访问SecWiki

SecWiki周刊（第464期) by ourren CVE-2022-41080_41082 Microsoft Exchange Server OWASSRF远程代码执行漏洞分析 by ourren 自动化提取恶意文档中的shellcode by ourren 更多最新文章，请访问SecWiki

Article URL: https://insights.sei.cmu.edu/blog/rust-vulnerability-analysis-and-maturity-challenges/ Comments URL: https://news.ycombinator.com/item?id=34505093 Points: 2 # Comments: 0

Article URL: https://sysdig.com/blog/cve-2023-0210-linux-kernel-unauthenticated-remote-heap-overflow/ Comments URL: https://news.ycombinator.com/item?id=34504964 Points: 6 # Comments: 0

Article URL: https://ariadne.space/2023/01/24/pkgconf-cve-2023-24056-and-disinformation/ Comments URL: https://news.ycombinator.com/item?id=34503115 Points: 5 # Comments: 0

We observed a recent spate of supply chain attacks attempting to exploit CVE-2021-35394, affecting IoT devices with chipsets made by Realtek. The post Realtek SDK Vulnerability Attacks Highlight IoT Supply Chain Threats appeared first on Unit 42.

1.1      Introduction Recently, myself and a few friends decided to port my coworker Kevin Haubris‘ COFFLoader project to Metasploit. This new BOFLoader extension allows Beacon Object Files (BOFs) to be used from a Meterpreter session. This addition unlocks many new possibilities for Meterpreter and, in my opinion, elevates Meterpreter back up to the status of... The post Operator’s Guide to the Meterpreter BOFLoader appeared first on TrustedSec.

When you go online to find new games, there is no shortage of results, quite the opposite. There are so many sites and games that it can… Continue reading on Medium »

Cloudflare Public Bug Bounty disclosed a bug submitted by albertspedersen: https://hackerone.com/reports/1785260 - Bounty: $7500

I used ChatGPT to write a Python script to help automate the setup for copying code from GitHub and setting up the fuzzer CI Fuzz CLI. Continue reading on Medium »

I used ChatGPT to write a Python script to help automate the setup for copying code from GitHub and setting up the fuzzer CI Fuzz CLI. Continue reading on Medium »

This is review for OSINT challenges in EG CTF 2023 Continue reading on Medium »

No content preview

What it is, how to do it, and how to prevent it Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

What it is, how to do it, and how to prevent it Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

What it is, how to do it, and how to prevent it Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

submitted by /u/themariocrafter [link] [comments]

submitted by /u/themariocrafter [link] [comments]

submitted by /u/mingaminga [link] [comments]

submitted by /u/CosmodiumCS [link] [comments]

Use different OS on the host machine than your analysis VM --> most malware will not be able to run there Use a different machine for malware analysis (even if analysis happens in VM) than for your other work or private stuff Make sure the analysis machine is not connected to the company network or your personal network. If you transfer files via USB flash drives, mark malware USB flash drives. E.g. red ones mean they are used to carry samples Be aware that those flash drives will become infected by worms If you transfer malware files via shared folder, make the folder readable only for the analysis VM. Be aware that writeable folders will become infected by worms, viruses or encrypted by ransomware. On Windows, use ACL to prevent execution. This will not prevent A…

submitted by /u/n4bb [link] [comments]

submitted by /u/smaury [link] [comments]

submitted by /u/CyberMasterV [link] [comments]

submitted by /u/sanitybit [link] [comments]

submitted by /u/brekfasbaksetz [link] [comments]

Linktree disclosed a bug submitted by 0xshdax: https://hackerone.com/reports/1699025 - Bounty: $400

Slack disclosed a bug submitted by pisarenko: https://hackerone.com/reports/834071 - Bounty: $1000

Recently, I've observed missing file system date/time metadata for local media and documents from iCloud device backups parsed in up to date Cellebrite PA. Has anyone else experienced this? If so, any proposed remedies? The iCloud device backups are pulled using the latest release of Elcomsoft PB. Internal metadata is fine, as expected. It's the external dates and times recorded by the iPhone file system that I'm not seeing anymore. submitted by /u/zero-skill-samus [link] [comments]

I’m having an interview with the Bronx da for a digital forensics examiner role. I only have around 2 years of experience mostly dealing with cyber security incidents and malware analysis, however I’m very familiar with Mobile forensics and computer forensics in criminal cases. Any tips on how to stand out and succeed ? submitted by /u/Lightyagami228 [link] [comments]

A new 13Cubed Interview is now publicly available! In this video, I talk with Andrew Rathbun about the EZ Tools Manuals he's written, as well as other DFIR community projects! https://www.youtube.com/watch?v=Mz5hin8Wxak submitted by /u/13Cubed [link] [comments]

I'm looking at the results of an android acquisition. Images were carved out of the VolleyCache subfolder for the youtube application. The files that exist in the volleycache folder typically end in .0. From what I've read, this is the raw image from the youtube server. My question is, the dates and times that appear in that raw image do not correspond to the MAC dates of the .0 file. There are two dates within that .0 image. The first date appears under Access-control-allow-origin, and the second date under "Expires". I'm more concerned with the first date (under access-control-allow-origin) than the "expires" date. What does that date reflect? Is this the date/time of the image as it exists on the youtube server? https://preview.redd.it/b9i2wcmsjsda1.jpg?width=337&format=pjpg&auto=webp&s=30be83ac494d458f28c1f2608f601e7577fab872 submitted by /u/IndividualHedgehog19 [link] [comments]

For those who are not familiar, an IDOR, or Insecure Direct Object Reference, is like a secret door in a website that should be locked… Continue reading on Medium »

Hello everyone, my name is Hac and in this post, I will be sharing my experience with the HTB CBBH exam, which is a practical web… Continue reading on InfoSec Write-ups »

In the world of cybersecurity, one of the most effective strategies for catching potential breaches is a bug bounty program. A bug bounty… Continue reading on Medium »

Today am showing you how youcan make your own github scrapper in python. Continue reading on Medium »

Cross-site scripting (XSS) has become one of the most common security vulnerabilities and a major threat to online security. It is a type… Continue reading on Medium »

how i access any account via visiting malicious link and hacked their gmail accounts via abusing “Sign in with Google”. Continue reading on Medium »

What is CAPTCHA? Continue reading on Medium »

Technical Tips Continue reading on Medium »

No content preview

No content preview

I just finished my first year working as security engineer and wanted to give a recap of all the things I did to get into my current role… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

I just finished my first year working as security engineer and wanted to give a recap of all the things I did to get into my current role… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

I just finished my first year working as security engineer and wanted to give a recap of all the things I did to get into my current role… Continue reading on InfoSec Write-ups »

No content preview

https://github.com/nanabingies/CVE-2021-21551 submitted by /u/nanabingies [link] [comments]

Chronolocation and geolocation used to solve a Quiztime OSINT challenge Continue reading on Medium »

Attackers can use web scraping to launch attacks on an organization. Continue reading on Medium »

https://vaporwave.ivan.moe/list/ submitted by /u/Waste-Release-6235 [link] [comments]

submitted by /u/dudewithoneleg [link] [comments]

1、厘清概念CSMA是Gartner去年提出的重要战略技术趋势之一，全称Cyber Security Mesh Architecture，网络安全矩阵架构。矩阵，在英文中有两个词：Grid，Mesh。其中，Grid代表矩阵内都是同类型元素，Mesh有异构的含义。因此，从这里可以看出，CSMA之所以用Mesh，是指“不同类型的、异构的安全原子能力，有机的联系、协同起来组成安全矩阵”的意思。看看Gar

内生安全，是我国科学家邬江兴院士针对网络空间安全现状的哲学性归纳与论述，包含内生安全问题和内生安全体制机制两部分内涵。

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

The January 2023 Wireshark quiz analyzes a pcap of network traffic from an Agent Tesla-style infection. This post details the answers. The post Answers to Unit 42 Wireshark Quiz, January 2023 appeared first on Unit 42.

When using Smbmap in your Red Team engagement, keep in mind, that Smbmap creates a random directory at the root of each SMB Share to check… Continue reading on Medium »

Article URL: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24059 Comments URL: https://news.ycombinator.com/item?id=34484784 Points: 59 # Comments: 38

Hi I recently saw an increase in demand for cybersecurity at the job centre, is it true that there is a shortage in this industry? What is the cybersecurity career path like in the UK and is it really financially rewarding? How is the stress? Thanks submitted by /u/fanduz [link] [comments]

Firmware is a good place for malware to hide. firmware resides in obscure places, under the radar of most people (it’s hard to see where it even exists). operating systems have no control over the firmware and caves in which they reside a lot of time the firmware is old and doesn’t receive updates (if it does, repositories are not clear) it’s often closed source and proprietary blob firmware survives OS reinstallation How to find the list of devices with firmware, verify the authenticity of the firmware software installed, and make sure there is no malware or root kit hidden anywhere in there? How difficult is it to install malware in firmware without physical access? submitted by /u/chaplin2 [link] [comments]

Like everywhere you see people freaking out about passwords being stored in plaintext but there's other implications of the password column in an SQL table being plaintext that hashing would of saved them from. One major example are second order injections. Things like second order stored XSS or second order SQL injection. The way these work is you would go to a /sign up endpoint and place an SQL statement in the password field basically signing up with the password ROBERT'); --DROP TABLE Students;-- typically it would immediately break the site upon sign up but most sign up forms are sanitized so it saves them temporarily however if we go to say an /updateprofile endpoint and the password is used in a SELECT statement unsanitized the tables would drop at this point. The key here is consistency and devs could easily make an off by one error and forget to escape one endpoint/page that's all it takes for a second order injection to pop up. I'm more surprised people just care about the passwords themselves being the issue and not the entire sites integrity there's like barely any discussion on this. submitted by /u/TheCrazyAcademic [link] [comments]

Hi /r/AskNetsec, I'm the lone security engineer at an 800 person organization and I'm feeling overwhelmed. Here are my high level responsibilities: Security architecture and engineering. Building and improving our SIEM (no time to monitor, investigate, and close alerts), implementing recommendations to harden our cloud environment, proposing and implementing new configurations (like DLP and MDM) Compliance. SOC compliance, GDPR, CCPA, contracts, policy, third-party questionnaires, security and awareness training Identity and access management. Creating and updating conditional access, improving/troubleshooting MFA, secrets management, privileged identity management Vulnerability management. Remediating vulnerabilities on our endpoints and in the cloud, patching workstations, inspecti…

Hi, sometimes, while playing with some box on HTB, I realize that I have a very little knowledge on modern webapp built with Node, JS, Angular, and so on. While it is a bit Off Topic, can anyone recommend me a good starting point to approach these technologies? Youtube channels, Udemy course, whatever. thankyou! submitted by /u/g-simon [link] [comments]

I am very unfamiliar with security, especially with web servers, but I was wondering this: in the period between which attackers gain access and their presence is discovered, are they able to start storing passwords/credit card details in plaintext somewhere outside the server? I guess they technically could, but more specifically, would that be quickly very obvious to the administrators? submitted by /u/SteveSonOfJobs [link] [comments]

Hi, my oscp course requires to run a variety of scripts that contain amsi-triggering code like powercat. So I have searched for various AMSI bypasses and found quite a few. I am now wondering, is there in this community a preferred way to run such scripts that it's most safe or better for other unknown issues? submitted by /u/DerekFoReal777 [link] [comments]

Let's face it, pentesting is not interesting as we thought when heard about it for the first time. I remember when I had more free time I was able to learn more each day rather than by doing CTFs or reading writeups. However, diving into work especially when you spend a lot of your time in meetings or doing reports (paperwork) and also doing general sec stuff (if you're working in a small firm) you will feel that you're losing your touch and missing a lot. I felt that when recently was assigned to deliver a revShell during a social engineering assessment, defenses are becoming much smarter and the open source tools I've used earlier not working like before (with code editing), it literally that sometimes you have to write your custom tools which are not easy especially if you're not proficient with multiple programming languages (python) for me I think I need some sort of new training only on evasion but can't decide which programming language to pick ATM (Thinking of c# instead of python) Have you ever been in a similar position? submitted by /u/sicKurity [link] [comments]

What Are Web Application Vulnerabilities? Continue reading on Medium »

Hello people Continue reading on Medium »

As a novice bug bounty hunter or beginner level ethical hacker, it can be overwhelming to navigate the vast landscape of tools available… Continue reading on Medium »

Portswigger HTTP Request Smuggling Solution | Karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

Hey folks, here is a simple web challenge for you… Continue reading on Medium »

Hello Hunters , Hello Infosec Community Continue reading on Medium »

Hey folks! Continue reading on Medium »

https://mega.nz/file/ReYzXISb#eZYb7pbTzY9N5D6kzOSYR5IBWg6oliRGyqwguIeGZbs Continue reading on Medium »

Introduction Continue reading on Medium »

JSON Web Tokens (JWT) are a popular method for authenticating and authorizing users in web applications. However, as with any technology… Continue reading on Medium »

Cross-site scripting (also known as XSS) is a web security vulnerability that allows an attacker to compromise the interactions that users… Continue reading on Medium »

I previously wrote about how we can use Rust’s “fearless concurrency”, resulting in a tool called ripunzip. (Here are some performance… Continue reading on Medium »

Reporting vulnerabilities in open-source software is a nightmare. How can we make it better? Continue reading on Medium »

I previously wrote about how we can use Rust’s “fearless concurrency”, resulting in a tool called ripunzip. (Here are some performance… Continue reading on Medium »

Reporting vulnerabilities in open-source software is a nightmare. How can we make it better? Continue reading on Medium »

Like stuff that is presumably suppose to be confidential i.e court case docs submitted by /u/dudewithoneleg [link] [comments]

Article URL: https://fossweekly.beehiiv.com/p/foss-weekly-32-kde-plasma-5-27-kernel-vulnerability-dneg-s-tool-and-more Comments URL: https://news.ycombinator.com/item?id=34481703 Points: 1 # Comments: 0

I’m sure you know, Security testers and investigators use Dorking (Google Hacking) to find sensitive information stored on websites… Continue reading on Medium »

Summary of the espionage-related news stories for the Week 3 (January 15–21) of 2023. Continue reading on Medium »

How can I convert/translate this call log to numbers I as a human can read? I extracted the data using adb and now am looking at it in autopsy but it doesn't make it readable. Like what are the real phone numbers? For example: -incoming1-0:1672517017901074%e609af1cf9fd7ecdið·™; ¢ -incoming1-0:1672519798593364%e609af1cf9fd7ecdUÆ…e; £ -incoming1-0:1672520180877682%e609af1cf9fd7ecdG$N; ¤ -incoming1-0:1672520194778510%e609af1cf9fd7ecdD¸Ês; ¥ -incoming1-0:1672520243018075%e609af1cf9fd7ecdðÿq ¦ I think the other thing I can do is load a .json file to translate, but I cant figure out how to do it HELP PLEASE? submitted by /u/WATERSLYDPARADE [link] [comments]

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

submitted by /u/NoPaleontologist7419 [link] [comments]

submitted by /u/NoPaleontologist7419 [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/danyork [link] [comments]

submitted by /u/sqall01 [link] [comments]

submitted by /u/roy_6472 [link] [comments]

I will walk you through step-by-step guide to get user’s NTLMv2 hash using LLMNR/NBT-NS Poisoning and cracking it using John the Ripper. Continue reading on Medium »

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Article URL: https://downloads.apache.org/httpd/CHANGES_2.4.55 Comments URL: https://news.ycombinator.com/item?id=34478456 Points: 2 # Comments: 0

Introduction Continue reading on Medium »

I’m looking for a new privacy-focused cloud storage service that deploys zero knowledge end-to-end encryption. I must say that I’m having a hard time understanding the terms and technology behind cloud and encryption stuff, though I’m still curious and would like to learn more. While reading about the pros and cons of encrypted cloud services, a question came up to my mind regarding the effectiveness and purpose of encrypting files: I use Windows 10 as my main OS; I store all my data locally on the PC, as well as having an automatically synced (identical) copy in cloud. Now let’s say that I open a document locally, edit it, save, then upload (sync) to an encrypted cloud service (alternatively, encrypt via Cryptomator and upload to whichever cloud service). I understand that the file that I just worked on and uploaded to the cloud service is now “safe” provided that the cloud provider uses zero knowledge E2EE. However, I viewed and edited the file in Windows 10 in an unencrypted state. Does this mean that Windows / Microsoft did have full access to the file and can send or sell data and information about the content of the file regardless of the encryption that happened afterwards? If that’s the case, then how can I benefit from encrypted cloud storage / encryption software (like Cryptomator) if the operating system is going to have full access to the local *unencrypted* files anyway? Especially when my Microsoft account is associated with both my Windows copy and MS Office apps – honestly it is just literally thoroughly integrated in the OS. Please correct me where you see fit as I hate to be paranoid, but at this moment I can’t seem to understand how to safely store / sync files both locally & in the cloud. Thank you submitted by /u/Xhuzestaan [link] [comments]

I was wondering if that inevitably gets passed on and subsequently linked to your other accounts in OSINT or other similar resources or if ProtonMail actually follows through when they say, "Your phone number will only be used for this one-time verification." submitted by /u/evanator5600 [link] [comments]

Hello everyone, I am interested in setting up a home lab with the goal of creating a secure sandbox environment. I want to use it as a safe platform for learning more about malware analysis, reverse engineering, threat intelligence on the Dark Web. I'm hoping developing these skills will help me land a job with a focus in those general areas. With that in mind, would a Type I or Type II hypervisor provide me the most flexible, secure, and easiest set up? I would imagine a Type I would be easier to set up, but a Type II would be more secure and provide more flexible options. Would having access to a non-virtualized OS provide me any additional benefits in the malware analysis/reverse engineering process? I'd also welcome any general recommendations or security best practices for creating a sandbox to play with malware. Thanks! submitted by /u/matthewob5 [link] [comments]

I am looking into standards/guidelines that can outline the requirements to address secure implementation of a third-party blackbox software apps on an internal server. I know there should be something but can not find anything about it. There is a lot written on sdlc but not so much on off the shelf. submitted by /u/elkindus [link] [comments]

I was trying all day to figure out how to export my icloud passwords to bitwarden with no avail. I have an iPhone & a PC. ​ It would be typical from Apple if there was no way to do this. This is actually exactly why I converted to BitWarden and Google Photos. I can't trust that Apple will give me full control of my data submitted by /u/SteveSonOfJobs [link] [comments]

Hi, guys I want to learn about red team stuff related to android hacking, I want to know how to obfuscate the malware for getting the android access, learn android malware obfuscation and are their any other ways to get the Remote access to android other then apk ? I have tried L3mon and TheFATRAT but either the app gets detected or gets uninstalled It would be great if you guys share some useful resource or guide me on getting into the android device. submitted by /u/geeky_gopher [link] [comments]

SQL Injection is a common method used by hackers to gain unauthorized access to a database and extract sensitive information. One of the… Continue reading on Medium »

As a bug bounty hunter, it is important to be familiar with the most common vulnerabilities that are found in bug bounty programs. By… Continue reading on Medium »

As a bug bounty hunter, the process of finding and reporting vulnerabilities in software can be both challenging and rewarding. To better… Continue reading on Medium »

Burp Suite is a powerful tool that is widely used by bug bounty hunters to find vulnerabilities in web applications. It is a collection of… Continue reading on Medium »

Bug bounty hunting is a process of finding and reporting vulnerabilities in software and receiving a reward for doing so. It has become a… Continue reading on Medium »

Bug bounty hunting is a challenging and rewarding field that requires a unique combination of technical skills and a specific mindset… Continue reading on Medium »

Bug bounty hunting on the darkweb can be a challenging and rewarding endeavor for experienced security researchers. Continue reading on Medium »

Bug bounty hunting is a rapidly growing field that offers a wide range of career opportunities and growth potential. A bug bounty hunter… Continue reading on Medium »

As a bug bounty hunter, one of the most effective ways to find and exploit vulnerabilities is through the art of chaining. Chaining is the… Continue reading on Medium »

This write-up is about my findings of CSRF + XSS and using them both to get a full account takeover. Wish u like it ❤ Continue reading on Medium »

Attacks known as privilege escalation attempt to gain increased access to important systems, applications, and networks by taking… Continue reading on Medium »

submitted by /u/themariocrafter [link] [comments]

submitted by /u/1bir [link] [comments]

submitted by /u/Rana_Thisara [link] [comments]

https://pierrepapierciseaux.net/.skynet/img/ - images for Windows 93 SkyNet https://pierrepapierciseaux.net/.skynet/midi/ - ditto for MIDI https://pierrepapierciseaux.net/.skynet/js/ - ditto for JS submitted by /u/themariocrafter [link] [comments]

http://www.salixa.com/trh/ios/IPAs/ipa/ http://s1.bitdl.ir/Software/ http://te.censoft.com/download/ https://files.zmodo.com/ http://mikerichardson.name/ https://marcoalima.com/ https://dl.ievo.top https://doc.downloadha.com/Mehran http://schwart6.home.xs4all.nl/smartview2/ submitted by /u/themariocrafter [link] [comments]

submitted by /u/Ch0pdr0p [link] [comments]

submitted by /u/Th4ray [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/bascule [link] [comments]

This is part of the HTB track under the name of Intro to Dante Continue reading on Medium »

What is red teaming? Continue reading on Medium »

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

Social media has become a crucial tool for law enforcement and other investigators in uncovering evidence and solving crimes. Continue reading on Medium »

A look at black hats, white hats and everything in between. Continue reading on Medium »

submitted by /u/self [link] [comments]

submitted by /u/jat0369 [link] [comments]

submitted by /u/buherator [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/_vavkamil_ [link] [comments]

Is a complex and meaningful arrangement of bits ever made into rules and drawn from the size and frequency of pings received? Could it be? I had the thought that one could specify arbitrary rules for using a certain ping size and frequency to represent bits of text or whatever else. example: 30-50bytes= 0 1-200 bytes= 1 or: 5-10 ping per second = 0 1-4 pings per second = 1 Obviously not ideal, but given ping often is easier to send and receive to untrusted devices without configuring things, and sometimes not blocked by firewall IS this ever done? What about messages that are simple, like within network turning on a light. I suppose you would have to have software that automatically translated the data into a long script of different sized and speeded pings to be sent separately in a row and have redundancy for lost packets. submitted by /u/Loquzofaricoalaphar [link] [comments]

I hear mixed opinions on disallowing password authentication, but my understanding is limited. Is password Auth an additional security measure or a means of establishing ssh without a key-pair exchange? Should ssh password authentication be avoided? I'm familiar with "permitRootLogin no" as being good practice. Thanks in advance! submitted by /u/pLeThOrAx [link] [comments]

Hi all, searched the sub, have scoured the internet, I believe due to its buzzword use the real meaning has been blown out. From my understanding it means that no one actually has real access to live data and everyone must use an encryption key to access said data. Can someone ELI5? submitted by /u/cfvhbvcv [link] [comments]

Can an internet-facing web app behind an OAuth-redirect login get discovered in the wild if it's not indexed by any search engines? E.g. If something automated is scanning for vulnerabilities can it eventually stumble on said web app amongst millions of random ones? Or can it only be discovered by someone targeting it explicitly e.g. enumerated subdomains of a top-level domain and found something tempting? I would assume the latter. Other possibility is of course someone internal who knows the address. We have such a web app and the WAF picked up a probe for WAF SQL injection vulnerabilities on its custom domain. I'm trying to work out if this is a random scan (don't need to think about it for now) vs getting specifically targeted (do need to think about it more). Thanks! submitted by /u/l00lighters [link] [comments]

I'm trying to use the BSIMM but I can't find any document that explains all of the activities in BSIMM? I want a list or a spreadsheet or something that just describes in a single document what the BSIMM framework contains. If you goto the download link on their website, it keeps redirecting me to some report by Synposys? submitted by /u/Soggy_Bag_8745 [link] [comments]

I've been seeing a lot of cyber security videos claiming that you can get a 6 figure job with no college degree, no experience, no boot camps, no certs, and no problem. They claim specifically for the vulnerable scanner operator, security analyst, and a compliance auditor. I have to say all of this sounds too good to be true. I've been searching online to see the reality(pros and cons) of these positions but fail to find legitimate resources. I want to know what is it like working in these positions day to day pros and cons. submitted by /u/Virtual_Decision9209 [link] [comments]

I have been following this researcher for a few weeks and love the look of their profile. Is there an easy way to mimic it? submitted by /u/_billybud_2 [link] [comments]

submitted by /u/dmchell [link] [comments]

When using Smbmap in your Red Team engagement, keep in mind, that Smbmap creates a random directory at the root of each SMB Share to check for write privileges, which makes it less stealthy :0 It deletes that directory afterwards (when no exception is thrown). But the Blue Team can still detect it by listening for file creation events at root directory of every share. The name of the directory is by default 10 characters long and consists of only uppercase letters. So this regex should detect it: ^[A-Z]{10}$ ​ Relevant Method -> https://github.com/ShawnDEvans/smbmap/blob/a771476977cee1b96108b3d0122330cd5fe50819/smbmap.py#L779 ​ Random directory name (if you want to patch it) -> https://github.com/ShawnDEvans/smbmap/blob/a771476977cee1b96108b3d0122330cd5fe50819/smbmap.py#L47 ​ ​ https://preview.redd.it/c88sc2nlm9da1.png?width=1008&format=png&auto=webp&s=1c79c52f3ebc0ca3438e643cf5070a4b5187fd79 submitted by /u/JustAnotherRedTeamer [link] [comments]

I was able to dump LSASS with DumpThatLSASS from D1rkMtr successfully with Windows Defender and CrowdStrike Falcon enabled. The EDR tools detect the behavior of the LSASS dump but don't stop the process. This was really interesting behavior for a compiled application. https://youtu.be/3nxjPkxGDWo https://github.com/D1rkMtr/DumpThatLSASS submitted by /u/Infosecsamurai [link] [comments]

submitted by /u/SCI_Rusher [link] [comments]

submitted by /u/sofblocks [link] [comments]

Greetings all, I’m attempting to create a timeline of events in a case and had a question regarding jump list files. Is it possible for the OS (Windows 10) to modify Last Accessed date/time of a jump list file without user input? It appears that Windows Explorer accessed a local folder at the following location - “C:\ProgramData[App Name]\…” via jump list and I want to confirm if it was user or OS generated. It should be noted the application appears to be an online-based subscription application. Thanks in advance for you help! submitted by /u/Plastic-Mud-868 [link] [comments]

I'm exporting all PDFS and office files from an image. When exporting it adds a number before the original file name, I assume because of duplicate name. When I save the table, the number doesn't appear in the csv. Is there a way to add it to the table? My goal is to create a load file but I'm having trouble matching the original file name. submitted by /u/theedon323 [link] [comments]

submitted by /u/copswithguns [link] [comments]

I am trying to analyse a .E01 file using FTK Imager 4.5.0.3 and am looking for evidence of email harvesting used for spamming unsuspected people to subscribe to illegal IPTV streaming services. I am new to this and have no idea, any help will be appreciated. ​ ​ https://preview.redd.it/a2c4o49868da1.png?width=319&format=png&auto=webp&s=42373e4358d60e820aa2199df45c8a1cfd052f9b submitted by /u/yogiblack590 [link] [comments]

Are there any decent UID's in the xml metadata embedded in .docx documents that would tie a document to the installation of word that created it? I can't spot any obvious ones but I dont do this too often. I've used 'creator' before when it was quite specific ('Rupert Q Specialname') - but I've got a bunch of documents that I know were made by the same person - and I need an easy way of spotting future ones also made by the same person. Unfortunately the 'creator' on these ones is just 'john' and that's not specific enough for my needs. Thanks for any suggestions. submitted by /u/boli99 [link] [comments]

Hello I am having issues with python modules in Autopsy. Tried a few and non shows up in the ingest menu. I got one to show up but it didn't want to run. Anyone had similar issues and fixed it? All the modules I tried that did not work are only a single .py file. The one that showed up has a few files besides the py file. Got python 2.7 and 3.11 installed. OS is Windows. Autopsy version is 4.19.3 submitted by /u/Iaitoo [link] [comments]

Hey guys! First post here, and I have a quick question. I am currently a 1st year undergrad studying Criminal Justice. My original plan was to go the FBI/DEA/HS route, but recently I’ve started to consider computer forensics careers a lot more. Would it be advisable to finish my CJ degree and get a masters in digital forensics or would it be better to stop my CJ degree and swap to a CS degree if I decide to pursue the DF route? Thanks for any advice! submitted by /u/DuskyBacchus [link] [comments]

Creating your own tools based on the needs encountered while hunting bugs is often a power that is overlooked… Continue reading on InfoSec Write-ups »

Portswigger — Basic server-side template injection Solution | Karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

What Happened with Bug Zero? Continue reading on Bug Zero »

Summary: I discovered the lack of rate-limiting issue in instagram which could have allowed an attacker to bypass two factor… Continue reading on Pentester Nepal »

What is Bruteforce? Continue reading on Medium »

Practice using tools such as Nmap and GoBuster to locate a hidden directory to get initial access to a vulnerable machine. Then escalate… Continue reading on Medium »

Buffers are memory storage regions that temporarily hold data while it is being transferred from one location to another. Continue reading on Medium »

Welcome back! In my previous post, I showed how we can bypass default Applocker rules using LNK files to get a Havoc beacon. Continue reading on Medium »

Article URL: https://arxiv.org/abs/2301.08170 Comments URL: https://news.ycombinator.com/item?id=34457721 Points: 1 # Comments: 1

Article URL: https://github.com/github/codeql Comments URL: https://news.ycombinator.com/item?id=34452685 Points: 4 # Comments: 0

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

今日暂未更新资讯~ 更多最新文章，请访问SecWiki

submitted by /u/themariocrafter [link] [comments]

在CTF中经常碰见md5相关题目，有的是单独一道，更多的是作为其他题目的一个点。这里整理一下md5相关知识，并给出涉及相关点的题目。我见到的有以下类型，请师傅们多加补充1、 md5爆破2、md5弱比较

通过CMS框架漏洞到系统命令提权

FreeBuf知识大陆App新年活动来啦~

The January 2023 Wireshark quiz analyzes a pcap of network traffic from an Agent Tesla-style infection. The post Unit 42 Wireshark Quiz, January 2023 appeared first on Unit 42.

Using Github Actions as pentester and to run tools Continue reading on Medium »

Vulnerabilities in cryptographic libraries found through modern fuzzing… Continue reading on Medium »

Fuzzing is increasingly more common, and exceptionally sophisticated at finding vulnerabilities at scale. Here are two online communities… Continue reading on Medium »

Vulnerabilities in cryptographic libraries found through modern fuzzing… Continue reading on Medium »

Fuzzing is increasingly more common, and exceptionally sophisticated at finding vulnerabilities at scale. Here are two online communities… Continue reading on Medium »

Article URL: https://ioc.exchange/@FuzzingWeekly/109720989217652281 Comments URL: https://news.ycombinator.com/item?id=34451019 Points: 1 # Comments: 0

XSS Nedir? Continue reading on Medium »

Currently in the organization I work for we are utilizing CB Defense and we are considering switching over to MS Defender. Now trying to find actual comparisons of these two/three (P2) products is very difficult since all comparisons are sales related. I want actual real world comparisons and the best I’ve found up to this point is this article. https://carbonblack.vmware.com/resource/vmwares-mitre-engenuity-attck%C2%AE-evaluations-delivers-unmatched-out-box-security-value What are all of your thoughts on P1/P2 in comparison to CB Defense? Please do not tell me about other Endpoint Security solutions. Just looking to get more insight on these. Appreciate any assistance with this decision. submitted by /u/ronni3 [link] [comments]

https://twitter.com/JohnLzzGrinders/status/1616195715159543810 The tweet includes screenshots of the conversation with the moderator, saying he would have the "child" install a program to control their computer. Discord allows screensharing so it seems malicious these servers keep trying to do it, see my other post for info on the other server that did this same thing. So my question is, even though I pretty much already know the answer, this is not safe to allow right? submitted by /u/Azekial_khyber_gta [link] [comments]

I am looking for something to help with compliance, primarily for SOC 2 but also some other frameworks. I would like it to do automated cross mapping between frameworks for controls/evidence. Also looking for something that has good 3rd party vendor management, risk register, integrations for automated evidence collection and generally just has a good UI/UX. I feel like I have looked at everything out there that might work. Vanta, Drata, Tugboat, Rhapsody, Apptega, StandardFusion, Secureframe, Anecdotes, LogicGate. All of these products seem to be lacking in some way. Mostly around the vendor and risk management. The old school GRC platforms are just too clunky and missing cross-framework mapping and integrations. Is anyone using something that they really like and check all my boxes? submitted by /u/junkaccount1999 [link] [comments]

I currently work at Meta as a Security Engineer. Because of some circumstances, I got a really low GPA during my bachelors (sub 2.5) but in my masters I did much better and got a 3.8 I mainly got my masters because I want to teach. For those with experiences around the teaching industry, how much will this matter in your opinion? submitted by /u/herbertisthefuture [link] [comments]

Currently in an internal battle with the network and infrastructure guys about the best type of system for our network. They’re of the mind to deploy a SIEM on prem so that, in their minds, we’re protected from the the SIEM itself being breached. Which is their concern with a cloud-based deployment. One of the SIEMs we’d reviewed is perfect but has read/write privileges with O365 for SOAR capabilities. This in their minds is antithetical to the type of system they had going in. Beyond the basics of cost, maintenance, and deployment ease of cloud. Is there any extra ammo you can give me here to build my case? Thanks. submitted by /u/LittleRaskol9 [link] [comments]

So bitsquatting was a popular fault manipulation technique I'm not gonna use the term fault injection because your not injecting any faults your just manipulating faults already happening to the hardware by crafting the right domains. The fault in this case is thermal residual energy that is known to cause bitflips in memory and in this case it happens during the DNS resolution process. Is there any other interesting attacks like this? Bitsquatting was novel at the time and extremely hard to mitigate the only protection was using ECC ram and even then I don't think error correcting ram mattered. submitted by /u/TheCrazyAcademic [link] [comments]

While layer 7 gets all the attention and popularity of the OSI model a lot of interesting things happen at layer 6 the presentation layer or what I like to call the data format layer. I like to explore various types of exotic over complex data formats because as they say complexity is the enemy of security. The general rule is if a softwares data formatting is too simple like static HTML or JSON it can't be exploited but if it's too complex it can be exploited. Parquet seems to be a complex data format with a lot of moving parts so I'm thinking like CSV theres bugs like a "Parquet Injection' if user input ever gets embedded into a Parquet file on the server backend which I've seen rarely on a few bug hunting engagements but never really messed with Parquet interactions much. submitted by /u/TheCrazyAcademic [link] [comments]

CertDB is designed to uncover hidden, forgotten, or abandoned web assets. It can also be used to locate origin servers, detect phishing or fraudulent sites, and even find deleted DNS entries. You can conduct fast searches for keywords, site names, and IP addresses. Try it now and let us know what you think! app.w2s2.com/certdb submitted by /u/One_Opposite_5424 [link] [comments]

i understand that there's also burp academy but there's no way interactive academy can give you knowledege close to what 900 page book can, i glanced over it and there were section about flash and labs that are recomended there are no longer available, i know there's still good information in there and will not skip it but is there something more updated? thanks submitted by /u/WestAd1987 [link] [comments]

As I've eluded to previously, I am preparing to put proper firewall policies in between our workstation and infrastructure networks. One aspect I'm not sure on though, is RDP and SSH access from the workstation network. I've got probably 3 PCs from which Admins will want to get RDP/SSH access. Would a jump box be a good solution, and if so what are some good ways to secure it? My thinking was off the domain and/or MFA to get access. The jump box would only allow RDP from workstation network, no other services. Keen to get some feedback on this one. Thanks! submitted by /u/brettfk [link] [comments]

We are currently are looking for a syslog server recommendations. We are looking to eliminate single points of failures. We currently use Splunk and encountered and issue where critical logs were lost because the server ran out of space and over wrote them before we could resolve the issue to ingest them. The primary focus is to eliminate single points of failure if our splunk instance encounters issues. Log source: Firewall Web proxy Windows events Sysmon IDS EDR App control Ect…. We currently at looking at the following: Rsylog Kiwi SyslogNG Any other recommendations?? Note: there are several similar post where individuals are recommending SIEMs. We are looking for a syslog server and not a new SIEM solution. submitted by /u/RedNeckHutch [link] [comments]

People talk about prototype pollution as a powerful vulnerability to get RCE but they never go into detail on the requirements it seems like it's a problem exclusive to things like node js express js etc and it's not a thing outside these environments. submitted by /u/TheCrazyAcademic [link] [comments]

That seems very much like a big hassle. Is it okay if I just update emails & bank accounts? submitted by /u/SteveSonOfJobs [link] [comments]

LocalTapiola disclosed a bug submitted by voiddy: https://hackerone.com/reports/1322322 - Bounty: $500

Yelp disclosed a bug submitted by rac_fckscty: https://hackerone.com/reports/629612

KAYAK disclosed a bug submitted by retr02332: https://hackerone.com/reports/1667998 - Bounty: $3000

HackerOne disclosed a bug submitted by reigertje: https://hackerone.com/reports/1838329

Article URL: https://seclists.org/oss-sec/2023/q1/42 Comments URL: https://news.ycombinator.com/item?id=34445602 Points: 55 # Comments: 29

Curl, or client URL is a command line tool that enables data exchange between a device and a server through a terminal. We can use this… Continue reading on Medium »

my personal bug bounty to-do items Continue reading on Medium »

Hii amigos today we are going to discuss about complete overview of SQLinjection and how to find them to earn some good bounties Continue reading on Medium »

As I was just messing up with my cousin’s Institute Portal, I noticed its login area and got curious to test its functionalities. Continue reading on Medium »

Most companies use open source projects. Identifying these components and fuzzing them with free fuzzers can show you vulnerabilities to… Continue reading on Medium »

In this story I’m explaining a vulnerability that I reported to a program in Hackerone, my english is not perfect and its not my mother… Continue reading on Medium »

This article will cover the essentials to get started with bug bounty hunting. There are many organizations with a need to have their… Continue reading on Martian Defense Cybersecurity »

Summary Continue reading on Medium »

This will be a setup guide for XSSHunter and integrating it with Discord Continue reading on Medium »

Bug vulnerability reports are critical for identifying and addressing security issues in software systems. Continue reading on Medium »

Portswigger Lab Solution — Cross-site WebSocket hijacking | Karthikeyan Nagaraj Continue reading on InfoSec Write-ups »

The lifes of many people around the globe rely on social stations and on our health care system every day. Continue reading on Medium »

Wizard Spider is a hacking group known for cyber espionage and targeting government. They have been active since 2017 and based in Russia. Continue reading on Medium »

How Organizations Can Stay Ahead of Threats Continue reading on Medium »

submitted by /u/ankenyr [link] [comments]

submitted by /u/woja111 [link] [comments]

submitted by /u/chrisy_e [link] [comments]

submitted by /u/scopedsecurity [link] [comments]

submitted by /u/bambo_gambo [link] [comments]

submitted by /u/Gallus [link] [comments]

submitted by /u/qwerty0x41 [link] [comments]

顶会论文写作建议（上）：宏观布局，避免“hard to follow” by ourren 从CISA KEV看海量漏洞管理方法 by ourren 基于代码属性图的自动化漏洞挖掘实践 by ourren mqtt攻击面和挖掘思路浅析 by 路人甲 一种 Foxit Reader 漏洞利用思路探索 by 路人甲 更多最新文章，请访问SecWiki

顶会论文写作建议（上）：宏观布局，避免“hard to follow” by ourren 从CISA KEV看海量漏洞管理方法 by ourren 基于代码属性图的自动化漏洞挖掘实践 by ourren mqtt攻击面和挖掘思路浅析 by 路人甲 一种 Foxit Reader 漏洞利用思路探索 by 路人甲 更多最新文章，请访问SecWiki

Most companies use open source projects. Identifying these components and fuzzing them with free fuzzers can show you vulnerabilities to… Continue reading on Medium »

Most companies use open source projects. Identifying these components and fuzzing them with free fuzzers can show you vulnerabilities to… Continue reading on Medium »

网信北京消息，首都医科大学附属北京友谊医院与荷兰阿姆斯特丹大学医学中心合作研究项目成为全国首个数据合规出境案例。

作为一个产研人，走遍了全国大江南北，和许许多多的销售兄弟姐妹一起并肩作战。

本文从漏洞披露时间、危害程度、影响范围等多个维度，盘点2022年高危漏洞TOP 10（排名不分先后）。

这些金额包括自 2022 年 1 月 28 日以来 27 个欧盟成员国以及冰岛、列支敦士登、挪威和英国开出的所有已知 GDPR 罚款。

亲俄罗斯的黑客组织Genesis Day称，因不满韩国与北约合作而攻破了三星集团的内部服务器。

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

No content preview

https://github.com/nobodyisnobody/docs/tree/main/modern.templates.for.shellcoding A convenient template for developing your shellcode on various architecture, x86, arm, mips Permit to run , debug your shellcode , produce an executable, or dump it to include it in your C or python exploit. As an example of usage, here is a Socks4 proxy shellcode (x86, arm, mips, etc...) , to pivot on IOT for example, and gain access to internal network.. https://github.com/nobodyisnobody/docs/tree/main/a.socks.proxy.shellcode ​ any suggestions are welcomed.. submitted by /u/nobodyisnobody13 [link] [comments]

Archive.org is one of the most important sources of information for #osint. From 1996 to 2023, more than 778 billion web pages were saved… Continue reading on Medium »

Part 1 Continue reading on Medium »

Sometimes you will encounter a photo or video that will need further inspection. You watch the footage endlessly and question yourself how… Continue reading on The First Digit »

Sometimes you will encounter a photo or video that will need further inspection. You watch the footage endlessly and question yourself how… Continue reading on Medium »

Unlock the power of OSINT with these awesome bots! From data mining to social media monitoring, these bots can help you get the intel you… Continue reading on Medium »

Article URL: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22809 Comments URL: https://news.ycombinator.com/item?id=34434047 Points: 2 # Comments: 0

Article URL: https://lwn.net/Articles/920256/ Comments URL: https://news.ycombinator.com/item?id=34423630 Points: 7 # Comments: 0

Hello everybody! Currently have Sec+ and am looking at furthering my education in the field of computer forensics! I’m brand new to this area of computing/security and would like to find out some pointers or the best pathway to get started. Any help would be great, thank you everyone. submitted by /u/Zealousideal_Cry7794 [link] [comments]

Discover how to exploit file inclusion vulnerabilities using DVWA in this tutorial. Learn everything about these vulnerabilities. Continue reading on InfoSec Write-ups »

Hello folks I hope you are doing well. I’m a Parag Bagul security Researcher and bug bounty hunter. Continue reading on Medium »

When writing a bug report, it is crucial to keep in mind the audience who will be reading it. Program Owner Analysts may not have the same… Continue reading on Medium »

When performing a penetration test, one of the most crucial parts is scanning and enumeration. Because if you lose any important port at… Continue reading on Medium »

A bug bounty program, also known as a vulnerability rewards program (VRP), is a crowdsourcing project that rewards people for finding and… Continue reading on Medium »

Disclaimer: This tutorial is just for educational purposes, don’t try to break any computer except yours. If you try to make real… Continue reading on Medium »

Here are some steps for beginners to get started with a bug bounty program: Continue reading on Medium »

TL;DR- A step-by-step walkthrough on how to bypass one-time passwords, including various methods of exploitation and links to further… Continue reading on The Gray Area »

Article URL: https://devblogs.microsoft.com/oldnewthing/20230117-00/?p=107722 Comments URL: https://news.ycombinator.com/item?id=34433617 Points: 1 # Comments: 0

This is part of the HTB track under the name of Intro to Dante Continue reading on Medium »

Are you fascinated by the world of cybersecurity and wondering which career path is right for you? Continue reading on Medium »

Are you fascinated by the world of cybersecurity and wondering which career path is right for you? Continue reading on System Weakness »

From research to writing SIEM rules, offensive scripts to report writing, learn how ChatGPT can be used for cybersecurity. Continue reading on Medium »

The stress attack is similar to the database stress test in that both involve subjecting the application to large volumes of information… Continue reading on System Weakness »

The stress attack is similar to the database stress test in that both involve subjecting the application to large volumes of information… Continue reading on Medium »

Atomic Red Team is an open-source project that provides a framework for testing the effectiveness of security controls in an organization… Continue reading on Medium »

Now to start with - I am not going to touch wget here. There is already a wealth of info about it here. Check the sidebar and go from there. I’ll go thru my process to download var. files (not just OD’s) as some may find it helpful. Maybe even have tips & tricks to streamline muh flow! FINDING DOWNLOADS Not a how-to-search per-se, more just a pointer. On chromium (using less and less due to resource hogging) you can basically add your own search operand by following the process here - https://support.google.com/chrome/answer/95426 here as an eg. is 1 of mine (note this is for searching for porn & NSFW but the system is the same for most sites) Fuskator fusk https://fuskator.com/search/%s/quality/ Firefox doesn’t make it so easy unfortunately - you can add & remove the approv…

submitted by /u/themariocrafter [link] [comments]

submitted by /u/themariocrafter [link] [comments]

submitted by /u/0xdea [link] [comments]

submitted by /u/ustayready [link] [comments]

submitted by /u/got_nations [link] [comments]

submitted by /u/0xdea [link] [comments]

submitted by /u/Security_Chief_Odo [link] [comments]

Let’s say I am going to migrate from lastpass to another password manager. Other than writing down ( or copy pasting to text editor) all my passwords, then entering the sites one by one under the new password manager, is there another easier way to do it? Like a common export import format between lastpass and another password manager? submitted by /u/mscheckfar [link] [comments]

Hello, I was wondering if you could evaluate a scenario for me. Background: Fully updated iphone with no jail break or whatever modifications. Has not yet been set up yet so when you turn it on the welcome message appears and asks you to create an iCloud account and a username etc. there is no passcode or anything because the phone is not even set up yet. The only thing that has happened since it has been opened from box is the SIM card has been inserted into it. left unattended for 5-10 minutes. Hypothetical scenario: a bad actor comes in during those 5-10 minutes, takes the phone somewhere, inserts it into some machine and the machine uploads some kind of virus or malware or key logger into it that controls the device. Allows user to remote into it or see what’s going on like a MDM device or something, idk. Ambient listening and stuff. Questions: is this scenario likely? Why or why not? I know certain software exists that brute forces into passcodes that the fbi or whatever has, and maybe even downloads data. I guess from there with access to an unlocked device they could install some type of spyware or something. But a. That would be a very sophisticated actor b. That iPhone has been set up and has data on it in my scenario it is a iPhone that is still in welcome mode so can someone install virus / malware / whatever into that? So overall, Is this scenario possible or likely? And if so, would a simple factory reset clear things up? Thank you!!! submitted by /u/Normal-Question-1994 [link] [comments]

hi, from the network security perspective, is there any real difference between Whatsapp chats and Telegram encrypted chats? Both claim to be end-to-end encrypted. I am not speaking on topic like "whatsapp is a Meta product while TG is not". thankyou! submitted by /u/g-simon [link] [comments]

I have an application that logs data to a file and immediately deletes it. I've been using all your standard Windows tools (procmon/ process explorer) to try and see exactly what data is being written, but having no luck. Can anyone recommend a way to actually see waht data is being written to a file by a Windows application? submitted by /u/security_intern [link] [comments]

The 2022 conference schedule ramped up in the second half of the year, and as you might expect, TrustedSec both attended and spoke at many of them. Within our organization, we have many different perspectives and focused interests, so we sampled opinions from some of the people who attended. We were curious how our experiences... The post Major Conference Roundup: Perspectives from Defcon, RSA, Black Hat, Gartner, and more! appeared first on TrustedSec.

Another year and another cert ! Continue reading on InfoSec Write-ups »

No content preview

No content preview

How many of you often see messages and alerts saying “Your credentials are compromised and found on darkweb”. In this article, let’s… Continue reading on InfoSec Write-ups »

This article presents you with a list of surface web sites that contain a vast number of onion URLs that you can use to explore and deep… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

Another year and another cert ! Continue reading on InfoSec Write-ups »

No content preview

No content preview

How many of you often see messages and alerts saying “Your credentials are compromised and found on darkweb”. In this article, let’s… Continue reading on InfoSec Write-ups »

This article presents you with a list of surface web sites that contain a vast number of onion URLs that you can use to explore and deep… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

Another year and another cert ! Continue reading on InfoSec Write-ups »

No content preview

No content preview

How many of you often see messages and alerts saying “Your credentials are compromised and found on darkweb”. In this article, let’s… Continue reading on InfoSec Write-ups »

This article presents you with a list of surface web sites that contain a vast number of onion URLs that you can use to explore and deep… Continue reading on InfoSec Write-ups »

No content preview

No content preview

No content preview

No content preview

Hey everyone! I'm happy to have joined the community! I'm very new at this, but not an absolute starter. I'm building a Discord server to share the learning resources I gather along the way. https://discord.gg/Qe3Tfnp2 I'd love if you'd help me test it, as it is in Beta still. And maybe you can share some FREE resources in the comments? (Reason why I'm asking for them to be free is because I'm writing from latam and I want to teach unpriviledge kids/people about red and blue teaming. Thank you so much for being kind and patiente with noobs like us. My pronouns are She/Her. TYSM submitted by /u/ZestycloseRaccoon466 [link] [comments]

Radamsa is a test case generator, it receives some input data and then it scrambles it to return some random data. Random is truly random… Continue reading on Medium »

Radamsa is a test case generator, it receives some input data and then it scrambles it to return some random data. Random is truly random… Continue reading on Medium »

开源软件安全性分析 by ourren 利用空间测绘进行威胁分析 by ourren 2022年全球高级持续性威胁（APT）研究报告 by ourren 更多最新文章，请访问SecWiki

开源软件安全性分析 by ourren 利用空间测绘进行威胁分析 by ourren 2022年全球高级持续性威胁（APT）研究报告 by ourren 更多最新文章，请访问SecWiki

Chinese APT Playful Taurus is using a new backdoor named Turian. Analysis suggests several Iranian government networks have likely been compromised. The post Chinese Playful Taurus Activity in Iran appeared first on Unit 42.

欧洲数据保护委员会在2022年开出的罚款金额约为29亿欧元（约 31 亿美元），是 2021 年开出的罚款金额的两倍多。

按照时间顺序，盘点2022年国内网络安全行业的具体投融资事件。